Can't delete ASA old certificates from chain

B1r070 — Tue, 12 Mar 2019 08:23:05 GMT

Hi,

today I renewed a certificate for the ASA's WEB-VPN and I wanted to remove the old one.

I followed the advice found in this link https://supportforums.cisco.com/discussion/12529666/delete-certificates-cisco-asa and I run the command "no certificate {Hex-Data}" to specify the old certificate:

ASA(config-ca-trustpoint)# crypto ca certificate chain {Trust-Point}
ASA(config-cert-chain)# no certificate {hex-data Certificate Serial Number}
Are you sure you want to remove the certificate? [yes/no]: yes
INFO: The certificate has been deleted/unassociated for trustpoint
ASA(config-cert-chain)

It deleted instead the new certificate ignoring the S/N!

is there a way to delete the old without recreating the trust point?

P.S.: I am a quite frustrated that a simple thing to do on any other device, like enrolling or renewing the certificates, Cisco makes so contorted.

For the advice I found I can only be very grateful to the users of this community that have shared their endeavor so far.

Thanks

topic Can't delete ASA old certificates from chain in Network Security

Can't delete ASA old certificates from chain