crypto pki trustpoint TP-self-signed

[vishalpatil86]

Hi,

I have a core switch(4506e) connected to 6 edge switches(2960)..

Each switch is configured with crypto pki trustpoint TP-self-signed

WHat is this exactly and whats its use?

Also, when i connect other 2960 with core, it automatically takes this crypto config..

I dont understand this/.

Help me on this

[army87]

This is for compliance for the 2960 xr switch

I want to understand if I carry out the "no crypto...." command I don't risk the switch rebooting.

[Richard Burts]

I am not clear why this is a compliance issue. But if you want to remove those lines I suggest that you first disable http secure-server. And to answer your specific question: it would not cause the switch to reboot.

[army87]

it is set as "no ip http secure-server". So it shouldn't require any more.

[Richard Burts]

If you have already disabled secure server then I would not think anything else would be required.

[army87]

TO BE REMOVED: crypto pki trustpoint TP-self-signed-576698624
self-signed enrollment
subject-name cn=IOS-Self-Signed-Certificate-576698624
revocation-check none
rsakeypair TP-self-signed-576698624

I need to remove it on a 2960 switch.
By running the command:
no crypto pki trustpoint TP-self-signed-576698624

will my switch reboot?