Deleting Key

To delete a certificate and its key from internal token:

$ certutil -F -d nssdb -f password.internal -n testcert

To delete a key from internal token:

$ certutil -F -d nssdb -f password.internal -k <key ID>

To delete a certificate and its key from HSM:

$ pki -d nssdb --token HSM -C password.HSM client-cert-del HSM:testcert

Do not use the the command below since it does not work:

$ certutil -F -d nssdb -h HSM -f password.HSM -n HSM:testcert
Incorrect password/PIN entered.
certutil: could not authenticate to token NSS Certificate DB.: SEC_ERROR_BAD_PASSWORD: The security password entered is incorrect.