Revoking a Key
Function
The npu-smi set -t revocate -i id -c chip_id -f file_path command is used to revoke a key.
Revoking a key is irreversible. If a key is revoked, it cannot be restored. Exercise caution when performing this operation.
Syntax
npu-smi set -t revocate -i id -c chip_id -f file_path
Parameters
Parameter |
Description |
|---|---|
id |
Device ID. The NPU ID obtained by running the npu-smi info -l command is the device ID. |
chip_id |
Chip ID. If there is only one chip, the chip ID is 0. NOTE:
Only the key of a D chip can be revoked. |
file_path |
Path of the key revocation file. The file path can contain only letters, digits, underscores (_), periods (.), slashes (/), and hyphens (-). NOTE:
For details about how to obtain the key revocation file, contact Huawei technical support. |
Restrictions
- This command must be run as the root user on a physical machine. If it is run as a non-root user on the physical machine, in a container, or on a VM, an error is reported.
- This command is used only when you need to revoke a key and a correct revocation file has been obtained. Otherwise, the command fails to be executed.
- The device is no longer available after key revocation.
Examples
npu-smi set -t revocate -i 2 -c 0 -f ***_CERT.data
Status : OK
Message : Set chip revocate successfully
Replace ***_CERT.data with the actual name of the key revocation file.