Cisco SD-WAN : ZTP

[RS19]

In ZTP scenario with respect to certificates, does the cEgde devices have default certificate which is required for authentication.

what is the best practice ?

Is it best to use the default certificate or use custom certificate ?

[prastrip]

By default the cedge will have VeriSign root CA and SUDI chip, if a customer is using default cert option then there is no issue.

If in case the controllers have got Enterprise cert then in that case, under PNP portal you can upload the enterprise root cert copy and the cEdge can grab that from there( and it will do zero touch)

[amcastagna]

Is any documentation that shows how to implement a enterprise cert with the SDWAN solution?

[sandreas]

Is this of any help?

https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.3/Configuration/Certificates