Device Certificates

Device certificates are installed and configured during the SLX device registration in XCO.

During the registration of an SLX device in XCO, the following certificates are installed on the device:

OAuth Certificate: The public certificate for verifying an XCO token is copied to the device. This is the JWT Certificate described in XCO Certificates.
Syslog Certificate: To push messages to XCO over port 6514.
HTTPS Certificate: To enable secure communication with the clients.

Along with the certificate installation, the following configuration changes are done on the registered device:

HTTP mode is disabled on the device, and HTTPS is enabled.
OAuth2 is enabled as the primary mode of authentication. Fallback is set to "local login."

Use the efa inventory device list command to verify the status of the certificates on the device. If the Cert/Key Saved column contains "N," then certificates are not installed.