A certificate must be unbound from all templates before deletion from the A10. After unbinding the certificate, you can delete the certificate from SSL Management.
Perhaps there is a stray config element using the certificate still. You could try the following:
thunder#show pki cert
!! look for the certificate, and check if it shows "bound" or "unbound". Examples:
thunder#show pki cert
Name Type Expiration Status
------------------------------------------------------------------------------
dunn-vthunder certificate/key Oct 1 13:41:01 2029 GMT [Unexpired, Bound]
vthunder-lab certificate/key Oct 1 13:41:01 2029 GMT [Unexpired, Unbound]
!! Look for config elements which may be using the certificate:
thunder#show run | include dunn-vthunder
Alternatively, you could search the running config in a text editor.
If the certificate shows "unbound" and you are still unable to remove the certificate after rebooting, this may be a bug type behavior that requires deeper troubleshooting. What ACOS version is this?
Harishankar
Member ✭
Comments
Model is TH5330
A certificate must be unbound from all templates before deletion from the A10. After unbinding the certificate, you can delete the certificate from SSL Management.
My team made a mistake as per your answer. We replaced new certificate on existing template. Later deleted the old certificate.
Now we observe old chain cert is still being used.
Any clue how to remove this from the file system level permanently ? We even restarted the A10 which did not help.
Perhaps there is a stray config element using the certificate still. You could try the following:
Alternatively, you could search the running config in a text editor.
If the certificate shows "unbound" and you are still unable to remove the certificate after rebooting, this may be a bug type behavior that requires deeper troubleshooting. What ACOS version is this?