Explains certificate management fundamentals and details the configuration of web server certificates and Cisco SD-WAN Secure Sockets Layer certificates for control components.
A certificate is a digital security credential that
-
enables authentication between devices in a fabric network,
-
establishes secure communication sessions, and
-
ensures compliance with certificate management policies.
Certificate management in fabric networks
Certificates are key to device authentication in Cisco SD-WAN fabric networks. Once authenticated, devices can safely exchange information. Certificate management involves generating Certificate Signing Requests (CSRs), obtaining signatures from Certificate Authorities (CAs), and installing the certificates per deployment requirements.
In commercial deployments, create a DNS A entry or CNAME for the .viptela.net or .sdwan.cisco.com DNS name. In government deployments, use the sdwangov.fedramp.cisco DNS name.
Control component certificates are used internally and should not be used for web server authentication. Only web server certificates are used for web server authentication.
Web server certificates
Explains the purpose, issuance, and management of web server certificates in Cisco SD-WAN environments.
Cisco Catalyst SD-WAN SSL certificates for control components
Explains how Cisco SD-WAN SSL certificates are used for authenticating and securing control components within SD-WAN fabric.