Log in to Security Cloud Control.

In the left pane, click Security Devices.

click the blue plus button to Onboard a device.

Click FTD.

When you attempt to onboard an FDM-managed device, Security Cloud Control prompts you to read and accept the Firepower Threat Defense End User License Agreement (EULA), which is a one-time activity in your tenant. Once you accept this agreement, Security Cloud Control doesn't prompt it again in subsequent FDM-managed onboarding. If the EULA agreement changes in the future, you must accept it again when prompted.

On the Onboard FTD Device screen, click Use Registration Key.

Enter the device name in the Device Name field. This could be the hostname of the device or any other name you choose.

In the Database Updates area, the Immediately perform security updates, and enable recurring updates option is enabled by default. This option immediately triggers a security update as well as automatically schedules the device to check for additional updates every Monday at 2AM. See Update FTD Security Databases and Schedule a Security Database Update for more information.

Disabling this option does not affect any previously scheduled updates you may have configured through Secure Firewall device manager.

In the Create Registration Key area, Security Cloud Control generates a registration key.

If you move away from the onboarding screen after the key is generated and before the device is fully onboarded, you will not be able to return to the onboarding screen; however, Security Cloud Control creates a placeholder for that device on the Security Devices page. When you select the device's placeholder, you will be able to see the key for that device in an action pane located to the right.

Click the Copy icon to copy the registration key.

You can skip copying the registration key and click Next to complete the place holder entry for the device and later, register the device. This option is useful when you're attempting to create the device first and later register it or if you're a Cisco partner installing a Proof of Value (POV) device in a customer network.

In the Security Devices page, you will see that the device is now in the connectivity state, "Unprovisioned". Copy the registration key appearing under Unprovisioned to Firewall device manager to complete the onboarding process.

Log into the Secure Firewall device manager of the device you want to onboard to Security Cloud Control.

In System Settings, click Cloud Services.

In the Security Cloud Control tile, click Get Started.

In the Region field, select the Cisco cloud region that your tenant is assigned to.

This step is not applicable FDM-managed devices running version 6.4.

In the Registration Key field, paste the registration key that you generated in Security Cloud Control.

Click Register and then Accept the Cisco Disclosure.

Return to Security Cloud Control. Select all the licenses you want to apply to the device.

Return to Security Cloud Control, open the Security Devices page and see that the device status progresses from "Unprovisioned" to "Locating" to "Syncing" to "Synced."