Unable to delete certificate request (error -13009)

Options
scf
scf Posts: 5 image  Freshman Member
First Comment Friend Collector
edited June 7 in Wireless

I have an NWA130BE running in standalone mode. While replacing an expired certificate, I had experimented with creating a CSR. Fortunately, I have the new certificate in place and working.

However, curiosity had gotten the best of me. I now have a request that I cannot delete. When I try to remove it, an error is returned:

CLI Number: 0
Error Number: -13009
Error Message: 'PKI certificate does not exist.'

I have attempted to sign the CSR and import it to satisfy the request, but it never associates it. It complains with a -13008 error and 'PKI key does not exist'. It appears that the device thinks there should be a certificate for it already and will not allow it to be deleted if it does not exist.

Without wiping the device, is there a way to delete the CSR through the UI or CLI?

All Replies

  • Zyxel_Tina
    Zyxel_Tina Posts: 855 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 100 Answers 500 Comments

    Hi @scf,

    To better understand the situation and investigate further, could you please assist us with the following?

    1. A screenshot or a brief video recording demonstrating the issue you're encountering
    2. Provide the device's diagnostic info file via private message by clicking my profile > Message

    Thank you for your cooperation!

    Zyxel Tina

  • Zyxel_Tina
    Zyxel_Tina Posts: 855 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 100 Answers 500 Comments

    Hi @scf,

    Thank you for your patience!

    After checking, you can use the following commands to check the certificate file information and delete the file. Once applied, it will disappear from the Web GUI as well.

    Router> show ca category local

    Router> configure terminal

    Router(config)# no ca category local <certificate_name>

    Zyxel Tina