SD-WAN vBond and vSmart Download Root Certificate

When installing the various SD-WAN controllers, it is necessary to create a certificate on all devices. It is possible to generate all of the necessary certificates on the vManage device using the openssl command.

When this is done, the following command must be run on both the vBond and the vSmart devices to request and download the certificate:

vBond1# request download scp://admin@10.1.0.1:/home/admin/ROOT-CA.pem
/usr/bin/download: line 33: /proc/sys/kernel/hung_task_timeout_secs: Permission denied
The authenticity of host '10.1.0.1 (10.1.0.1)' can't be established.
ECDSA key fingerprint is SHA256:tDhYof1C8igzPm29fFlV5afe44qjJZAEDCNv9qQ2gPE.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.1.0.1' (ECDSA) to the list of known hosts.
viptela 19.3.0 

admin@10.1.0.1's password: 
ROOT-CA.pem                                   100% 1257    41.1KB/s   00:00    
/usr/bin/download: line 33: /proc/sys/kernel/hung_task_timeout_secs: Permission denied

Note that this results in a Permission denied error, however, the process actually completes successfully. This can be confirmed with the following output:

vBond1# request root-cert-chain install /home/admin/ROOT-CA.pem
Uploading root-ca-cert-chain via VPN 0
Copying ... /home/admin/ROOT-CA.pem via VPN 0
Updating the root certificate chain..
Successfully installed the root certificate chain

The same is the case for the vSmart device.

https://networklessons.com/cisco/cisco-sd-wan/cisco-sd-wan-controllers-installation#Certificates