Feature history of certificate management

Updated: June 8, 2026

Want to summarize with AI?

Developments in certificate management, by release.

Table 1. Feature history
Feature name	Release information	Feature description
Certificate Revocation	Cisco IOS XE Catalyst SD-WAN Release 17.7.1a Cisco vManage Release 20.7.1	This feature revokes enterprise certificates from devices based on a certificate revocation list that SD-WAN Manager obtains from a root certificate authority.
Staging for certificate installation on WAN edge devices	Cisco Catalyst SD-WAN Control Components Release 20.18.1 Cisco IOS XE Catalyst SD-WAN Release 17.18.1a	When SD-WAN Manager installs a new certificate on a WAN edge device, the device first tests the certificate in a staging step before proceeding with installing the certificate. The device verifies that it can successfully establish control connections using the certificate.
Support for Cisco PKI Certification	Cisco IOS XE Catalyst SD-WAN Release 17.18.1a Cisco Catalyst SD-WAN Manager Release 20.18.1	This feature allows Cisco SD-WAN Manager to transition from SD-WAN Manager-signed certificates to Cisco PKI as the default certificate method for virtual routers to enhance security and reliability.
Web server certificate installation	Cisco Catalyst SD-WAN Control Components Release 26.1.1.1	SD-WAN Manager uses an authentication certificate for secure browser connections. This release provides new installation options for web server certificates: Enterprise certificate support with SCEP and EST protocols Certificate renewal option Automatic propagation of a certificate across all SD-WAN Manager instances Ability for tenants in a multitenant environment to install a certificate of their own

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.