In the VIP Gateway > Setting, the VIP Certificate or other SSL Certificate cannot be removed or changed.
Failed to delete 'certname'
When viewing the Cert:
Invalid input string format. Check the input for invalid characters and try again
Possible corruption in the VIP key store.
Note: An active SSL cert showing in use as Yes cannot be deleted until all services (Enterprise Gateway Console, Healthcheck, SSP or VIP Manager IdP) using that cert are set to use another SSL cert, or the HTTPS option is disabled (HTTP). An SSL cert change will require a service restart.
To avoid access denied errors, the In Use status should show as No. Proceed with these steps only if all other steps to free up the SSL certificate have failed:
"C:\Program Files (x86)\Symantec\VIP_Enterprise_Gateway\jvm\bin\keytool" -list -keystore DEFAULT.
"C:\Program Files (x86)\Symantec\VIP_Enterprise_Gateway\jvm\bin\keytool" -delete -noprompt -alias <name of cert to be removed> -keystore DEFAULT.