Automated certificate signing through Cisco Systems With this option, certificate signing requests are automatically sent to the Cisco PnP cloud service where the certificate is signed. The SD-WAN Manager then automatically retrieves the certificate and installs it. A DNS server needs to be configured to resolve the hostname, cloudsso.cisco.com and subsequently, apx.cisco.com. The SD-WAN Manager needs to reach both servers on TCP port 443. Account credentials are configured before this certificate option can be configured. Procedure 1: Verify Cisco server reachability 1. Ensure that a DNS server is defined for VPN 0 on SD-WAN Manager via SSH or console: config terminal vpn 0 dns 208.67.222.222 primary commit and-quit