Which value is verified in the certificates to confirm the identity of the device?

Each Cisco SD-WAN device has a unique Serial Number encoded within its certificate, which the vBond and vSmart controllers verify against the authorized device list in vManage to confirm the device's identity. This serial number is embedded in the SUDI or chassis certificate and cannot be forged, making it the authoritative identity attribute checked during the certificate validation process.

A One-Time Password (OTP) is a transient authentication token used during initial provisioning in some workflows, but it is not a value stored inside a certificate used for identity confirmation.

The System-IP is a logical identifier assigned administratively to a WAN Edge in vManage and is not embedded in certificates for hardware identity verification.

The Chassis-ID may be referenced during provisioning but is not the standardized field within X.509 certificates used to verify device identity in the SD-WAN authentication process.