Rate This Document
Findability
Accuracy
Completeness
Readability

Destroying the HAF Certificate

If you do not need to use the certificate, you can destroy it. Go to the installation directory and run the following command to destroy the certificate. After the command is executed, the certificate and the corresponding private key in the certificate path specified in the configuration file are deleted.

./tools/haf-tool cert --destroy

The following steps use the offload nodes with the HAF service as an example. For host nodes and the offload nodes with the HAF library, perform similar steps.

Use SmartKit to destroy the certificate on the server or client node.

Parameter

Description

Task Name

Destroying a node certificate

Task Description

Destroying the certificate of the current node

Run Directory

/

Run Command

/home/omm/haf-install/haf-target/tools/haf-tool cert --destroy

Whether to Check Return Code

Yes

Expected Return Code

0

crt_destroy.sh is the internal script for destroying a certificate. It is stored in haf-tool/scripts of the installation directory and is invoked by haf_tool. The internal invoking commands are as follows:

cd tools/scripts

./crt_destroy.sh -d ok -t <cert_path>

After the command is executed, manually enter the password for logging in to the remote server.

Table 1 Parameter description

Option

Description

Mandatory

-d ok

Indicates whether to destroy the certificate. This parameter cannot be modified when being invoked by haf-tool and must be ok.

-

-t <cert_path>

Path for storing the certificate. haf-tool uses the cert_path parameter in the configuration file to invoke this path.

Yes

crt_destroy.sh is an internal tool of the software. You are not advised to invoke it independently.