ASA 5520 - Trustpoint enrollment configuration cannot be changed for an authenticated trustpoint?

[Gerard Roy]

Help Please :)

We have an ASA 5520 that we have installed a new certificate. The company was purchased and we are removing all references to old company domain name. We deleted the Trustpoint and have attempted to set new trustpoint for enrollment???

See commands below:

no crypto ca trustpoint ASDM_TrustPoint7

crypto ca trustpoint NEW-WC1
enrollment terminal

when we run above command, we get this error:

ERROR: Trustpoint enrollment configuration cannot be changed for an authenticated trustpoint.

ssl trust-point NEW-WC1 outside

[Marvin Rhoads]

Try first clearing out the old certificate thus:

clear configure crypto ca certificate "certname"