Home
Support
Product Support
Routers
Cisco SD-WAN
Configuration Guides

Cisco Catalyst SD-WAN Certificate Management Guide, Releases 26.x and Later

Which devices support third CA?
How do I revoke a CA cert?
What is the TrustPoint for?

View all Saved Content

PDF

Is this content helpful?

Helpful Unhelpful

Suggestions for Improvement

Thank you for your feedback. Your response has been recorded.

Ask about this content

Cisco Catalyst SD-WAN Certificate Management Guide, Releases 26.x and Later

Which devices support third CA?
How do I revoke a CA cert?
What is the TrustPoint for?

Expand all sections

About this content

Certificate Management

Feature history of certificate management
Managing certificates in SD-WAN Manager
Stage a WAN edge device
Invalidate a device
Send SD-WAN Controller serial numbers to the SD-WAN Validator
Install a signed certificate
Export a root certificate
View a certificate signing request
View a device certificate signing request
View a certificate
Generating a certificate signing request
Reset the RSA key pair
Invalidate an SD-WAN Control Component
Invalidate a device certificate
View a log of certificate activities
View a signed certificate
Revoking certificates
Restrictions for revoking certificates
Revoke certificates
Cisco PKI certificates
Renew a certificate
How SD-WAN Manager installs a certificate on an edge device
Install a web server certificate

Certificate Management for Cisco SD-WAN Control Components

SD-WAN Control Components certificate management feature history
Control Components Certificate Management workflow
Renew certificates using the Control Components Certificate Management workflow

Certificate Management for Edge Devices

Feature history for edge device certificate management
WAN edge device certificate management workflow
Renew certificates using the edge device certificate management workflow

Third-party Certificate Authority

Third-party Certificate Authority
Third-party certificate authority certificates for edge devices
Upload third-party certificate authority certificates
Delete third-party certificate authority certificates
Configure devices to use third-party certificate authority certificates, using a configuration group
Revoke third-party certificate authority certificates
Renew third-party certificate authority certificates
Monitoring third-party certificate authority certificates
Track a third-party certificate authority certificate

Expired certificate indication and quarantine

Feature history for expired certificate indication and quarantine
Expired certificate indication and quarantine
Enable quarantining devices with expired certificates
View and remedy devices in expired certificate quarantine

Certificate Revocation List-based Quarantine

Feature history of certificate revocation list-based quarantine
Certificate revocation list-based quarantine
Configure certificate revocation list-based quarantine

Root Certificate Authority Certificates

Feature history for root certificate authority certificates
Add root certificate authority certificates
View root certificate authority certificates
Delete root certificate authority certificates

Enterprise Certificates

Feature history of enterprise certificates
Enterprise certificates
Configure enterprise certificates
Use an enterprise certificate with SD-WAN Control Components

Automated certificate management

Feature history for automated certificate management
Automated certificate management
Configure certificate settings
Troubleshoot certificate management on CA server

Cisco Catalyst SD-WAN Certificate Management Guide, Releases 26.x and Later

Monitoring third-party certificate authority certificates

Updated: June 8, 2026

Want to summarize with AI?

On this page

Monitor CA Certificate Installation

Monitor PKI Trustpoints

Provides information about monitoring third-party certificate authority certificates.

Methods of monitoring third-party certificate authority certificates.

Monitor CA Certificate Installation

After the third-party CA certificate installation is complete, the device sends event logs to SD-WAN Manager.

From the Cisco SD-WAN Manager menu, choose Monitor > Logs > Events.

The CA certificate installation is listed as an event and appears in the Events table.

Monitor PKI Trustpoints

Monitor PKI Trustpoints using the real time command PKI Trustpoint.

Need help?

Open a support case

(Requires a Cisco Service Contract)

Bias-free language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.