Configure Certificate on the Device Using CLI Commands

1. Set up the controller chain file in the devices.
2. Copy the ca chain file from the controller:

   /home/ubuntu/certs/cachain.cgnx.net.pem
3. Replace or create the following files in the device, contact your Palo Alto Networks representative to update the CA certificate on the ION device.

   /config/certs/controller_ca_chain.pem

   /etc/certs/controller_ca_chain.pem
4. Add the static host details to the device:

   config static host add ip <Controller_IP> name controller.local.cgnx.net
   config static host add ip <Controller_IP> names locator.cgnx.net
   config static host add ip <Controller_IP> names mfg.local.cgnx.net
   config static host add ip <Controller_IP> names vmfg.local.cgnx.net
   config static host add ip <Controller_IP> names toolkitsessions.local.cgnx.net
   

5. Verify that the controller details are reflected in the device by executing the command dump overview.
6. After verification, create machine by accessing the controller using the device ID.