300-415 Question 93
Select 2As part of configuring a Cisco SD-WAN deployment, you are tasked with ensuring that the vEdge devices can establish secure communication with the vSmart controllers. To achieve this, you need to upload certificates and manage the device list in the vManage system. Which of the following steps are required to successfully configure certificates and device lists for the vEdge devices?
- A
Generate and install a root certificate on the vManage system for signing device certificates.
- B
Upload the vEdge serial file (device list) to the vManage system.
- C
Manually generate and upload a certificate signing request (CSR) for each vEdge device.
- D
Validate the vEdge device certificates against the root certificate.
- E
Synchronize the device certificates with the vSmart controllers.
Show answer and explanation
Correct answers: B, D
Explanation
To successfully configure certificates and device lists for vEdge devices in a Cisco SD-WAN deployment, you must upload the vEdge serial file (device list) to vManage to register the devices. Additionally, the certificates associated with the vEdge devices are validated against the root certificate to ensure secure communication. Other processes, like CSR generation and certificate synchronization, are automated in Cisco SD-WAN and do not require manual intervention.
- A. Incorrect.
This is incorrect because the Cisco SD-WAN solution uses Cisco's built-in certificate authority (CA) or an external CA, and there is no need to manually generate and install a root certificate on vManage.
- B. Correct.
This is correct because uploading the vEdge serial file (device list) to vManage is necessary to register vEdge devices and associate their serial numbers with the SD-WAN fabric.
- C. Incorrect.
This is incorrect because vManage automates the generation and signing of CSRs for vEdge devices, so there is no need to manually generate and upload them.
- D. Correct.
This is correct because vManage verifies the vEdge device certificates against the root certificate to ensure their authenticity and trustworthiness.
- E. Incorrect.
This is incorrect because there is no explicit step to 'synchronize' device certificates with vSmart controllers. Instead, vSmart controllers automatically establish secure connections with devices based on certificates during the control plane setup.