EMC® VNX® Series Security Configuration Guide for VNX

Delete CA certificates

You should delete a CA certificate when it has expired, been compromised, or is no longer needed for authenticating a server.

To delete a CA certificate, use this command syntax:

$ server_certificate <movername> -ca_certificate -delete
{-all|<certificate_id>}

where:

<movername> = name of the physical Data Mover with which the CA certificate is associated.

<certificate_id> = ID of the certificate. You can determine the ID through the -ca_certificate -list command.

NOTE: Use the -all option to delete all the CA certificates available to the Data Mover.

Example:

To delete the CA certificate on server_2 identified by its ID number, type:

$ server_certificate server_2 -ca_certificate -delete 1

Output:

server_2 : done