Installing a Certificate Using Manual Enrollment

On the Devices > Certificates screen, choose Add to open the Add New Certificate dialog.

Choose a device from the Device drop-down list.

Associate a certificate enrollment object with this device in one of the following ways:

• Choose a Certificate Enrollment Object of the type Manual from the drop-down list.
• Click (+), to add a new Certificate Enrollment Object, see Adding Certificate Enrollment Objects.

Press Add to start the enrollment process.

Execute the appropriate activity with your PKI CA Server to obtain an identity certificate.

1. Click Identity Certificate warning to view and copy the CSR.

2. Execute the appropriate activity with your PKI CA Server to obtain an identity certificate using this CSR.

   This activity is completely independent of the Cisco Defense Orchestrator or the managed device. When complete, you will have an Identity Certificate for the managed device. You can place it in a file.

3. To finish the manual process, install the obtained identity certificate onto the managed device.

   Return to the Cisco Defense Orchestrator dialog and select Browse Identity Certificate to choose the identity certificate file.

Select Import to import the Identity Certificate.

Click the magnifying glass to view the Identity Certificate for this device.