


See the Cisco SD-WAN Design Guide for background information. Many of the procedures assume a new certificate install on newly-installed, on-prem controllers, but much of the information is relevant to an existing SD-WAN controller deployment. This guide assumes that the controllers are deployed and have been added to vManage. The certificate renewal process is also covered. It includes different methods for obtaining signed controller certificates and how to configure and load the authorized serial number file. This document provides technical guidance on the steps needed to successfully install certificates on on-premise Cisco SD-WAN controllers or in a Cisco-hosted or provider-hosted cloud solution. Appendix C: Plug and Play (PnP) Connect Portal.Appendix B-Windows OpenSSL Certificate Authority (CA).Appendix A-Hardware and software used for validation.Manual Loading of Root Certificates (WAN Edge Routers).

Option 2: Automatically sync to the PnP Connect portal from vManage.Process 2: Deploying the WAN Edge Authorized Serial Number List.Option 5: Enterprise Root Certificate Authority (CA).Option 4: Manual certificate signing through Cisco Systems.Option 3: Automated certificate signing through Cisco Systems.Option 2: Manual third-party certificate signing through Symantec/DigiCert.Option 1: Automated third-party certificate signing through Symantec/Digicert.Process 1: Deploying Controller Certificates.Authentication/Authorization of SD-WAN devices.
