topic Re: Cannot remove trustpoint from ASA in Network Security https://community.cisco.com/t5/network-security/cannot-remove-trustpoint-from-asa/m-p/1216454#M418018 <HTML><HEAD></HEAD><BODY><P>Hello Brett</P><P>Have you tried removing CA certificate first?</P><P>clear configure crypto ca certificate "certname"</P><P></P><P>Also try clearing crls</P><P>clear crypto ca crls</P><P></P><P>An IPSEC transform-set in use by a crypto-map, containing RSA may also be causing this. Try removing the transform-set first</P><P></P><P>Regards</P></BODY></HTML> Sat, 06 Jun 2009 10:51:56 GMT Alan Huseyin Kayahan 2009-06-06T10:51:56Z Cannot remove trustpoint from ASA https://community.cisco.com/t5/network-security/cannot-remove-trustpoint-from-asa/m-p/1216453#M418017 <P>I am trying to clear out all the trustpoints on my ASA to reconfigure the ASA phone-proxy. However, I cannot remove the ctl-file asdm_CTL_File.</P><P></P><P>When I enter the command clear configure crpyto ca trustpoint I receive this error.</P><P></P><P>ERROR: The trustpoint phoneproxy_trustpoint appears to be in use. Unable to remove this trustpoint.</P><P></P><P>ERROR: Trustpoint cannot be removed There are 1 open sessions.</P><P>ERROR: The trustpoint _internal_PP_asdm_CTL_File appears to be in use. Unable to remove this trustpoint.</P><P></P><P>ERROR: Trustpoint cannot be removed There are 1 open sessions.</P><P>INFO: Be sure to ask the CA administrator to revoke your certificates.</P><P></P><P>I'm sure it's one or two commands that I am missing. Any help would be great.</P><P></P><P></P> Fri, 21 Feb 2020 11:29:58 GMT https://community.cisco.com/t5/network-security/cannot-remove-trustpoint-from-asa/m-p/1216453#M418017 brett.harrison 2020-02-21T11:29:58Z Re: Cannot remove trustpoint from ASA https://community.cisco.com/t5/network-security/cannot-remove-trustpoint-from-asa/m-p/1216454#M418018 <HTML><HEAD></HEAD><BODY><P>Hello Brett</P><P>Have you tried removing CA certificate first?</P><P>clear configure crypto ca certificate "certname"</P><P></P><P>Also try clearing crls</P><P>clear crypto ca crls</P><P></P><P>An IPSEC transform-set in use by a crypto-map, containing RSA may also be causing this. Try removing the transform-set first</P><P></P><P>Regards</P></BODY></HTML> Sat, 06 Jun 2009 10:51:56 GMT https://community.cisco.com/t5/network-security/cannot-remove-trustpoint-from-asa/m-p/1216454#M418018 Alan Huseyin Kayahan 2009-06-06T10:51:56Z Re: Cannot remove trustpoint from ASA https://community.cisco.com/t5/network-security/cannot-remove-trustpoint-from-asa/m-p/1216455#M418020 <HTML><HEAD></HEAD><BODY><P>If this issue is still not solved, do a "show tls-proxy sessions" and clear any in-use sessions.</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Sun, 07 Jun 2009 08:45:19 GMT https://community.cisco.com/t5/network-security/cannot-remove-trustpoint-from-asa/m-p/1216455#M418020 Farrukh Haroon 2009-06-07T08:45:19Z Re: Cannot remove trustpoint from ASA https://community.cisco.com/t5/network-security/cannot-remove-trustpoint-from-asa/m-p/1216456#M418022 <HTML><HEAD></HEAD><BODY><P>Looks like the commands took. Thank you for your help!</P></BODY></HTML> Fri, 12 Jun 2009 19:57:49 GMT https://community.cisco.com/t5/network-security/cannot-remove-trustpoint-from-asa/m-p/1216456#M418022 brett.harrison 2009-06-12T19:57:49Z Re: Cannot remove trustpoint from ASA https://community.cisco.com/t5/network-security/cannot-remove-trustpoint-from-asa/m-p/1216457#M418024 <HTML><HEAD></HEAD><BODY><P>Please mention which command specifically solved your problem.</P><P></P><P>Please rate any solutions if you find them helpful.</P><P></P><P>Regards</P><P>Farrukh</P></BODY></HTML> Sat, 13 Jun 2009 04:36:18 GMT https://community.cisco.com/t5/network-security/cannot-remove-trustpoint-from-asa/m-p/1216457#M418024 Farrukh Haroon 2009-06-13T04:36:18Z