Cisco
Login
Search
Software Secure Firewall Threat Defense
Platform Secure Firewall Threat Defense Virtual
Activity Onboard

Objects and Certificates Certificates Installing a Certificate using EST Enrollment

Last updated: Jul 29, 2025

Installing a Certificate using EST Enrollment

Before you begin


 

Using EST enrollment establishes a direct connection between the managed device and the CA server. So be sure your device is connected to the CA server before beginning the enrollment process.


 

EST's ability to auto-enroll a device when its certificate expires is not supported.

Procedure

1

On the Devices > Certificates screen, click Add to open the Add New Certificate dialog.

2

Choose a device from the Device drop-down list.

3

Associate a certificate enrollment object with this device in one of the following ways:

  • Choose the EST certificate enrollment object from the Cert Enrollment drop-down list.
  • Click (+), to add a new Certificate Enrollment Object, see Adding Certificate Enrollment Objects.
4

Click Add to enroll the certificate on the device.

The Identity Certificate will go from InProgress to Available as the device obtains its identity certificate using EST from the specified CA. Sometimes, a manual refresh might be required to obtain the identity certificate.
5

Click the magnifying glass to view the Identity Certificate created and installed on this device.

Previous topic Installing a Certificate Using Self-Signed Enrollment Next topic Installing a Certificate Using SCEP Enrollment