In the Security Cloud Control navigation menu, click Security Devices, then click the blue plus button () to Onboard a device.

Click the FTD tile.

Under Management Mode, be sure FTD is selected.

Select Use CLI Registration Key as the onboarding method.

Enter the Device Name and click Next.

For the Policy Assignment, use the drop-down menu to choose an access control policy for the device. If you have no policies configured, choose the Default Access Control Policy.

For the Subscription License, click the Physical FTD Device radio button, and then check each of the feature licenses you want to enable. Click Next.

For the CLI Registration Key, Security Cloud Control generates a command with the registration key and other parameters. You must copy this command and use it in the intial configuration of the Firewall Threat Defense.

configure manager add Security Cloud Control_hostname registration_key nat_id display_name

Copy this command at the Firewall Threat Defense CLI after you complete the startup script. See Perform initial configuration.

configure manager add account1.app.us.scc.cisco.com KPOOP0rgWzaHrnj1V5ha2q5Rf8pKFX9E
Lzm1HOynhVUWhXYWz2swmkj2ZWsN3Lb account1.app.us.scc.cisco.com

Click Next in the onboarding wizard to start registering the device.

(Optional) Add labels to your device to help sort and filter the Security Devices page. Enter a label and select the blue plus button (). Labels are applied to the device after it's onboarded to Security Cloud Control.