Question regarding DNA-C System Certificates

[hisen22]

Just looking for a clear and concise answer.

Is a wildcard certificate acceptable to use for DNA-Center?

My understanding from my research so far is a custom host name cert is ideal with the SAN, Alt_names updated with FQDN, pnpserver.domain.com and enterprise/cluster IPs.

Ps. I want to use DNS resolution for plug n play and I want a CA signed (or internal CA Signed) cert on the appliance.

Construtive thoughts to share? I know where the security best practices guides is by the way.

[Roger Kallberg]

This doesn’t seem to be related to anything within the Collaboration area. Advise you to look for a more suitable location in the community for asking this line of question.