Delete a CA client in SSL

To delete a CAClient object from the security configuration...

Security | SSL certificate and key management | Certificate Authority (CA) client configurations | CA client name | Delete

We can also use the deleteCAClient AdminTask.

The CA client cannot be deleted using deleteCAClient if the CA certificate in the keystore is still referenced by the CA client...

wsadmin>$AdminTask deleteCAClient {-caClientName myca}
WASX7015E: Exception running command: "$AdminTask deleteCAClient {-caClientName myca}"; exception information: com.ibm.websphere.management.cmdframework.CommandValidationException:
CWPKI0687E: The Certificate Authority (CA) client myca is still referenced by: [Certificate alias myca21 in key store CellDefaultKeyStore]
wsadmin>

 

Related

Secure communications
CAClientCommands