Cisco Catalyst SD-WAN Onboarding Guide, Releases 26.x and Later

PDF

Configure a web server certificate for Cisco SD-WAN Manager

Updated: July 7, 2026

Want to summarize with AI?

Log in

Generate and install a web server certificate for secure connections to the Cisco SD-WAN Manager server.

To establish a secure connection between your web browser and the Cisco SD-WAN Manager server using authentication certificates, you must generate a CSR to create a certificate, have it signed by a root CA, and then install it. You must install a separate certificate on each Cisco SD-WAN Manager server in a cluster.

Procedure

1.

Configure web server certificate settings.

Alternatively, from the Cisco SD-WAN Manager menu, choose Administration > Settings > Web Server Certificate.

2.

Choose a method for web server authorization.

Table 1.

SD-WAN Manager signed

Enterprise (Auto)

Enterprise(Manual)
3.

If you choose Enterprise(Manual)
4.

Click Generate CSR .

5.

Enter these fields:

Table 2.

Field

Description

Key size (bits)

Choose an option 2048 or 4096.

Common name

Enter the common with the domain name or IP address of the SD-WAN Manager server.

For example, the fully-qualified domain name of SD-WAN Manager could be vmanage.org.local.

Organizational Unit

Enter organizational unit name within your organization.

Organization

Enter the organization name as specified by your root CA.

City

Enter the name of the city where your organization is located.

State

Enter the state in which your city is located.

Email

Enter the email address of the organization.

2-Letter country code

Enter the two-letter code for the country in which your state is located.

For example, the two-letter country code for the United States of America is US.
SAN DNS names

Enter the Subject Alternative Name(SAN) DNS names. If you enter more than one DNS name, separate each URI with a space or a comma.

Subject Alternative Name (SAN) URIs

enter the URIs of resources to which the certificate trust should be extended. If you enter more than one URI, separate each URI with a space or a comma.

Enter each URI in scheme : value format, where scheme is the protocol for accessing the resource and value is the resource. For example, https://example.example.com or scp://example.example.com .

6.

Click Generate to generate the CSR.

What to do next

Send the CSR to your CA server to have it signed.

When you receive the signed certificate, click Certificate in the web server certificate page to install the new certificate. The View certificate box displays the current certificate on the Cisco SD-WAN Manager server.

Copy and paste the new certificate in the box. Alternatively, click Import certificate and Select a File to download the new certificate file.

Restart the application server and log in to Cisco SD-WAN Manager .