VCP-VCF Administrator 2024 Question 128
Select 3As a VMware Cloud Foundation Administrator, you are tasked with performing a certificate rotation for the management domain within your SDDC Manager. Which of the following steps are required to successfully rotate certificates managed by the SDDC Manager?
- A
Generate a new Certificate Signing Request (CSR) for the management components from the SDDC Manager UI.
- B
Manually replace all certificates on each ESXi host within the management domain.
- C
Import the signed certificate chain into the SDDC Manager and apply it to the selected components.
- D
Verify the new certificates by checking the updated expiration dates in the SDDC Manager UI.
- E
Restart all VMs within the management domain to ensure the certificates take effect.
Show answer and explanation
Correct answers: A, C, D
Explanation
To perform certificate rotation in VMware Cloud Foundation using SDDC Manager, you must generate a new CSR, import the signed certificate chain, and apply it to the relevant components. Finally, you should verify the new certificates through the SDDC Manager UI to confirm successful rotation. VMware Cloud Foundation automates many aspects of certificate management, eliminating the need for manual replacement or unnecessary VM restarts.
- A. Correct.
Correct. Generating a new CSR is a required step to create new certificates for the management components.
- B. Incorrect.
Incorrect. SDDC Manager automates the certificate management process, including updating ESXi host certificates, so manual replacement is unnecessary.
- C. Correct.
Correct. Importing the signed certificate chain into SDDC Manager and applying it to the appropriate components is a critical step in the rotation process.
- D. Correct.
Correct. Verifying the new certificates in the SDDC Manager UI ensures that the certificate rotation was successful and that the new certificates are applied correctly.
- E. Incorrect.
Incorrect. Restarting VMs is not required as part of the certificate rotation process, as SDDC Manager handles certificate propagation and service restarts automatically.