Home
Support
Product Support
Routers
Cisco SD-WAN
Configuration Guides

Cisco Catalyst SD-WAN Certificate Management Guide, Releases 26.x and Later

Which components can I renew?
Can I renew multiple certificates?
Do expired certificates break control connections?

View all Saved Content

PDF

Is this content helpful?

Helpful Unhelpful

Suggestions for Improvement

Thank you for your feedback. Your response has been recorded.

Ask about this content

Cisco Catalyst SD-WAN Certificate Management Guide, Releases 26.x and Later

Which components can I renew?
Can I renew multiple certificates?
Do expired certificates break control connections?

Expand all sections

About this content

Certificate Management

Feature history of certificate management
Managing certificates in SD-WAN Manager
Stage a WAN edge device
Invalidate a device
Send SD-WAN Controller serial numbers to the SD-WAN Validator
Install a signed certificate
Export a root certificate
View a certificate signing request
View a device certificate signing request
View a certificate
Generating a certificate signing request
Reset the RSA key pair
Invalidate an SD-WAN Control Component
Invalidate a device certificate
View a log of certificate activities
View a signed certificate
Revoking certificates
Restrictions for revoking certificates
Revoke certificates
Cisco PKI certificates
Renew a certificate
How SD-WAN Manager installs a certificate on an edge device
Install a web server certificate

Certificate Management for Cisco SD-WAN Control Components

SD-WAN Control Components certificate management feature history
Control Components Certificate Management workflow
Renew certificates using the Control Components Certificate Management workflow

Certificate Management for Edge Devices

Feature history for edge device certificate management
WAN edge device certificate management workflow
Renew certificates using the edge device certificate management workflow

Third-party Certificate Authority

Third-party Certificate Authority
Third-party certificate authority certificates for edge devices
Upload third-party certificate authority certificates
Delete third-party certificate authority certificates
Configure devices to use third-party certificate authority certificates, using a configuration group
Revoke third-party certificate authority certificates
Renew third-party certificate authority certificates
Monitoring third-party certificate authority certificates
Track a third-party certificate authority certificate

Expired certificate indication and quarantine

Feature history for expired certificate indication and quarantine
Expired certificate indication and quarantine
Enable quarantining devices with expired certificates
View and remedy devices in expired certificate quarantine

Certificate Revocation List-based Quarantine

Feature history of certificate revocation list-based quarantine
Certificate revocation list-based quarantine
Configure certificate revocation list-based quarantine

Root Certificate Authority Certificates

Feature history for root certificate authority certificates
Add root certificate authority certificates
View root certificate authority certificates
Delete root certificate authority certificates

Enterprise Certificates

Feature history of enterprise certificates
Enterprise certificates
Configure enterprise certificates
Use an enterprise certificate with SD-WAN Control Components

Automated certificate management

Feature history for automated certificate management
Automated certificate management
Configure certificate settings
Troubleshoot certificate management on CA server

Certificate Management for Cisco SD-WAN Control Components

Updated: June 8, 2026

Describes how to manage certificates for Cisco Catalyst SD-WAN Control Components and edge devices in SD-WAN Manager. It covers certificate authorization, CSR generation, certificate installation, validation, renewal, and related workflows for maintaining secure control connections.

SD-WAN Control Components certificate management feature history

Describes developments in SD-WAN Control Components certificate management, by release.

Control Components Certificate Management workflow

Describes the Control Components Certificate Management Workflow, a step-by-step workflow that updates the authentication certificates for SD-WAN Control Components.

Renew certificates using the Control Components Certificate Management workflow

Procedure to renew certificates using the Control Components Certificate Management workflow.

Need help?

Open a support case

(Requires a Cisco Service Contract)

Bias-free language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.