What is a capability of Cisco Catalyst SD-WAN vManage Certificate Management APIs?

While vManage might play a role in requesting signatures from an external CA, it does not typically "sign" certificates itself in the capacity of a Certificate Authority (CA) for end-entity certificates.

While vManage *can* generate CSRs, its primary role in certificate management extends beyond just generation to full lifecycle management, including distribution.

Rolling back a certificate by serial number might be a feature, but the core function of vManage certificate management APIs is broader and includes proactive distribution, which is more fundamental to an SD-WAN deployment.

Cisco vManage is the central controller for SD-WAN, and its Certificate Management APIs are designed to orchestrate the lifecycle of certificates, including the crucial task of distributing signed certificates to vEdge devices to establish secure IPsec tunnels and ensure trust within the SD-WAN overlay.