Which certificate field is verified to confirm the identity of the physical WAN Edge device?

The Serial Number is the unique identifier embedded in the hardware of each Cisco WAN Edge device. During the onboarding process, the device's serial number is compared against the list of authorized serial numbers pre-provisioned in the Cisco vManage controller. This verification ensures that only legitimate and approved devices join the SD-WAN fabric, preventing unauthorized devices from establishing trust. OTP (One-Time Password) is used for initial authentication but doesn't uniquely identify the physical device. System-IP is a logical identifier within the SD-WAN overlay and can be changed, thus not a fixed physical identifier. Chassis-ID is not a standard field used for this specific identity verification in Cisco SD-WAN.