For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Anush's avatar
Anush
Icon for Nimbostratus rankNimbostratus
Dec 12, 2016

How to delete Orphan certs and keys

we have around 1000 orphan certs and keys to delete. I understood that if I used "delete system crypto", it will left system file as it in bigconf.config file so better to use GUI. but deleting these mass amount of certs/keys using GUI is not quite practical.

 

Is there any other way I can delete those certs/keys which can clean up the files in conf file too?

 

Thanks,

 

application delivery
BIG-IP
LTM
security

3 Replies

    • Anush's avatar
      Anush
      Icon for Nimbostratus rankNimbostratus
      Dec 12, 2016

      Thanks for your comment. I already have list of certs/keys. I believed that if I use "delete sys crypto key" command, it will delete certs/keys but not delete from conf. file.

       

      is it not true?

       

      Thanks

       

    • Anush's avatar
      Anush
      Icon for Nimbostratus rankNimbostratus
      Dec 12, 2016

      I just tried on one of our test box and yes that is correct that if you use "delete crypto" command, bigip.conf file still showing you it's there but if you use by GUI, it will get deleted from .conf file too. my problem is, deleting around 1000 certs/keys using GUI is not convenient so trying to find command or any other way which can clean up .conf file too.

       

      Thanks