2V0-21.23 Question 232
Select 3An administrator is tasked with configuring vSphere Trust Authority (vTA) in their vSphere 8 environment to enhance security by leveraging attestation. During the setup process, they are required to configure the Trusted Cluster with a Key Provider. Which of the following steps are required to correctly configure vTA with a Trusted Key Provider?
- A
Establish a trust relationship between the Attestation Host and the Trusted Cluster.
- B
Enable vSphere Native Key Provider on the Trusted Cluster.
- C
Configure the Attestation Service on the Trust Authority Cluster.
- D
Add the Trusted Hosts to the Trusted Cluster.
- E
Enable TPM 2.0 on all ESXi hosts in the environment.
Show answer and explanation
Correct answers: A, C, D
Explanation
Configuring vSphere Trust Authority involves setting up a Trusted Cluster that can validate the integrity of its ESXi hosts and securely manage encryption keys. Essential steps include establishing a trust relationship between the Attestation Host and Trusted Cluster, configuring the Attestation Service, and adding the Trusted Hosts to the Trusted Cluster. While enabling TPM 2.0 and vSphere Native Key Provider can provide additional benefits, they are not mandatory steps for vTA configuration.
- A. Correct.
Establishing a trust relationship between the Attestation Host and the Trusted Cluster is a necessary step to ensure that the Trusted Cluster can verify the integrity of its hosts.
- B. Incorrect.
Enabling the vSphere Native Key Provider is optional and not specifically required for vSphere Trust Authority configuration. Trust Authority uses an external or trusted key provider.
- C. Correct.
Configuring the Attestation Service on the Trust Authority Cluster is a crucial step to enable communication and validation between the Trusted Cluster and the Trust Authority Cluster.
- D. Correct.
Adding the Trusted Hosts to the Trusted Cluster is necessary to ensure they can be validated and managed within the Trusted Cluster for workload security.
- E. Incorrect.
While TPM 2.0 is recommended for enhanced security, it is not strictly required for vSphere Trust Authority configuration. The focus is on attestation and key management.