Explains what certificates are and their role in fabric networks, including authentication and security.
A certificate is a digital security credential that
-
enables authentication between devices in a fabric network,
-
establishes secure communication sessions, and
-
ensures compliance with certificate management policies.
Certificate management in fabric networks
Certificates are key to device authentication in Cisco SD-WAN fabric networks. Once authenticated, devices can safely exchange information. Certificate management involves generating Certificate Signing Requests (CSRs), obtaining signatures from Certificate Authorities (CAs), and installing the certificates per deployment requirements.
In commercial deployments, create a DNS A entry or CNAME for the .viptela.net or .sdwan.cisco.com DNS name. In government deployments, use the sdwangov.fedramp.cisco DNS name.
Control component certificates are used internally and should not be used for web server authentication. Only web server certificates are used for web server authentication.