Configure Certificate on the Device Using CLI Commands

Set up the controller chain file in the devices.
Copy the ca chain file from the controller:
/home/ubuntu/certs/cachain.cgnx.net.pem
Replace or create the following files in the device, contact your Palo Alto Networks representative to update the CA certificate on the ION device.
/config/certs/controller_ca_chain.pem
/etc/certs/controller_ca_chain.pem
Add the static host details to the device:
config static host add ip <Controller_IP> name controller.local.cgnx.net
config static host add ip <Controller_IP> names locator.cgnx.net
config static host add ip <Controller_IP> names mfg.local.cgnx.net
config static host add ip <Controller_IP> names vmfg.local.cgnx.net
config static host add ip <Controller_IP> names toolkitsessions.local.cgnx.net
Verify that the controller details are reflected in the device by executing the command
dump overview.
After verification, create machine by accessing the controller using the device ID.