MRA cannot provision certificates to remote endpoints, CAPF included. CAPF enrollment has to be done on premises, inside the firewall, before the device goes remote.

Checked 2026-09-24

MRA doesn't support certificate provisioning for remote endpoints.
Vendor
Cisco
Product
Cisco Expressway
Subsystem
certificates
Deployment
on-premises
Region
not restricted
Release range
X15.2 guide; current as of 2026-09-24
Checked
2026-09-24

Sources

Cite this note

APA

WarmTransfer. (2026, September 24). Expressway and Mobile and Remote Access: source note cucm-expressway-mra-no-remote-capf. WarmTransfer. https://warmtransfer.net/knowledge/claims/cucm-expressway-mra-no-remote-capf

BibTeX

@misc{warmtransfer-claim-cucm-expressway-mra-no-remote-capf,
  title  = {Expressway and Mobile and Remote Access: source note cucm-expressway-mra-no-remote-capf},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/cucm-expressway-mra-no-remote-capf},
  note   = {Source note cucm-expressway-mra-no-remote-capf, checked 2026-09-24}
}

Read in context