Delete a Private Key
You can delete a private key along with its certificate chain from the keystore. Use this action with caution, as deleting a private key is permanent. If you delete a key that is the default SSL or CA key, be sure to designate a replacement immediately, otherwise the following will occur:
gateway91
You can delete a private key along with its certificate chain from the keystore. Use this action with caution, as deleting a private key is permanent. If you delete a key that is the default SSL or CA key, be sure to designate a replacement immediately, otherwise the following will occur:
- If you delete the CA key and do not designate a replacement, CA services will be unavailable when the cluster is restarted.
- If you delete the SSL key and do not designate a replacement, the following will occur after the cluster is restarted: the first cluster node that starts up will automatically create a self-signed SSL key and configure the cluster to use that as its SSL key.
To delete a private key:
- In the Policy Manager, select[Tasks] > Certificates, Keys, and Secrets > Manage Private Keysfrom the Main Menu. The Manage Private Keys dialog appears.
- Select the private key to be deleted and then click [Properties]. The Private Keys Properties dialog appears.
- Click [Destroy Key] in theOther Actionssection. You are prompted to confirm.
- Select the check box to indicate that you are aware of the consequences of deleting a private key. The [OK] button is enabled only when the check box is selected.
- Click [OK]. The private key is deleted. Note that all cluster nodes must be restarted before the deletion takes full effect.