VCP-VCF Administrator 2024 Question 127
Single answerYou are tasked with rotating the certificates managed by the SDDC Manager in a VMware Cloud Foundation environment. During the process, you notice that one of the workload domains is not using the updated certificates after the rotation is completed. What is the most likely step you must take to ensure the updated certificates are applied to the workload domain?
- A
Manually restart the vRealize Suite components in the affected workload domain.
- B
Re-run the certificate rotation workflow for the affected workload domain.
- C
Verify that the certificate chain is properly imported into the SDDC Manager keystore.
- D
Reboot all ESXi hosts within the affected workload domain.
Show answer and explanation
Correct answer: B
Explanation
During certificate rotation in VMware Cloud Foundation, if the new certificates are not applied correctly to a workload domain, re-running the certificate rotation workflow for the affected domain ensures that all components receive the updated certificates. This step resolves potential issues such as missed or failed updates during the initial rotation process.
- A. Incorrect.
Restarting vRealize Suite components is not directly related to the certificate rotation process managed by the SDDC Manager. This will not solve the issue.
- B. Correct.
Re-running the certificate rotation workflow ensures that any missed or failed steps during the initial process are applied correctly. This is the correct step to resolve the issue.
- C. Incorrect.
While verifying the certificate chain is an important step, it is a prerequisite to the rotation process and does not resolve the issue at hand after the rotation is completed.
- D. Incorrect.
Rebooting ESXi hosts is not required for certificate rotation and does not ensure the certificates are properly applied to the workload domain.