4.3. Removing a certificate issued by an external CA from an IdM user, host, or service account by using the IdM CLI

Procedure

1. To remove a certificate from an IdM user, enter:

   $ ipa user-remove-cert user --certificate=MIQTPrajQAwg...

   Alternatively, you can run the ipa user-remove-cert command interactively by executing it without adding any options.

2. Specify the following information:

   • The name of the user
   • The Base64-encoded DER certificate
   注意

   Instead of copying and pasting the certificate contents into the command line, you can convert the certificate to the DER format and then re-encode it to Base64. For example, to remove the user_cert.pem certificate from user, enter:

   +

   $ ipa user-remove-cert user --certificate="$(openssl x509 -outform der -in user_cert.pem | base64 -w 0)"

3. To remove a certificate from an IdM host, enter:

   • ipa host-remove-cert

4. To remove a certificate from an IdM service, enter:

   • ipa service-remove-cert