Cisco Catalyst SD-WAN Certificate Management Guide, Releases 26.x and Later

PDF

Renew a certificate

Updated: June 8, 2026

Want to summarize with AI?

Log in

Procedure to renew a certificate.

Before you begin

  • From the Cisco SD-WAN Manager menu, choose Administration > Settings > Certificate settings. Select an option and choose enterprise mode to enable the certificate revocation list (CRL).

    • In the Certificate Signing by field, choose Cisco (Recommended) or Manual or Enterprise Certificate .

    • When you choose Cisco (Recommended), select Sync Root Certificate to sync root certificate to all the connected devices.

    • In the Validity Period field, choose the duration.

    • Select Save.

Procedure

1.

From the Cisco SD-WAN Manager menu, choose Configuration > Certificates.
2.

Select WAN Edge List.
3.

For the desired SD-WAN Controller, select … and choose Renew CSR.

The Renew CSR opens.

The certificates are renewed in this order:

  1. Cisco SD-WAN Manager

  2. Cisco SD-WAN Validator

  3. Cisco SD-WAN Controller

  4. Cisco IOS XE Catalyst SD-WAN device