erase root-ca

Last Updated : Aug 28, 2026 |
This command informs the gateway to erase (delete) the Root-CA certificate referenced by <index>.
Prolog information
Metadata
Keywords:

Syntax

erase root-ca <app> <index>

Parameters

Parameter
Description
Possible Values
Default Value
app
Application name. The enumerated choices are:
  • h248reg (specifies the TLS usage over the control channel to Communication Manager)
  • sla (specifies the TLS usage over the link to the host SLA Monitor app)
  • syslog (specifies the TLS usage over the syslog connection to a log server)
  • web (specifies the TLS usage for the HTTPS connections to web servers which are used for downloading and uploading of files). This option also erases the trust anchor files.
  • h248reg
  • sla
  • syslog
  • web
index
The “index” of each line above can be used as a “handle” to identify the certificate. If one desires more detail about a certificate, supply the index of the certificate on the command line.
  • An integer: The index of the certificate to copy as displayed in the show root-ca command output for the source appA
  • All: When selected, the gateway will copy all the certificates present for the source appA and add them to the store for the destination appB
Note:
The erased trust anchor files will be restored after the reboot. To permanently disable the trust anchor files, see Trust-anchors.

User level

read-write

Context

general

Example