Cisco Nexus 7000 Series - Page 164

Before using the no crypto ca trustpoint command to remove the trustpoint, you must first delete the
identity certificate and CA certificate (or certificate chain) and then disassociate the RSA key pair from
the trustpoint. The device enforces this sequence of actions to prevent the accidental removal of the
trustpoint with the certificates.
Note
This command does not require a license.
Examples
This example shows how to declare a trustpoint CA that the device should trust and enter trustpoint
configuration mode:
switch#
configure terminal
switch(config)# crypto ca trustpoint admin-ca
switch(config-trustpoint)#
This example shows how to remove the trustpoint CA:
switch#
configure terminal
switch(config)# no crypto ca trustpoint admin-ca
Related Commands
DescriptionCommand
Authenticates the certificate of the certificate
authority.
crypto ca authenticate
Generates a certificate signing request for a trustpoint.crypto ca enroll
Displays the identity and CA certificate details.show crypto ca certificates
Displays trustpoint configurations.show crypto ca trustpoints
Cisco Nexus 7000 Series Security Command Reference
138
C Commands
crypto ca trustpoint