VCP-VCF Administrator 2024 Question 260
Select 3As a VMware Cloud Foundation Administrator, you need to secure communication between components in your environment by creating an SSL certificate. During the process, you are required to generate a Certificate Signing Request (CSR). Which steps must you perform to create the CSR and ensure the certificate can be used for your environment?
- A
Specify the Common Name (CN) that matches the Fully Qualified Domain Name (FQDN) of the server.
- B
Select the encryption algorithm used by the certificate authority (CA).
- C
Provide the organization name, organizational unit, and location details.
- D
Generate a private key and ensure it is stored securely.
- E
Upload the signed certificate directly to the vCenter Server Appliance (VCSA).
Show answer and explanation
Correct answers: A, C, D
Explanation
To create a Certificate Signing Request (CSR), you must include critical details such as the Common Name (CN), organizational information, and location details. Additionally, generating a private key is mandatory for signing the request. These steps ensure the CSR is valid and can be submitted to a Certificate Authority (CA). Steps such as selecting an encryption algorithm and uploading the signed certificate are not part of the CSR creation process and occur at different stages.
- A. Correct.
Specifying the Common Name (CN) is essential as it must match the FQDN of the server to avoid SSL validation issues.
- B. Incorrect.
The encryption algorithm is determined by the certificate authority, not the CSR creator, so this step is not needed during the CSR creation process.
- C. Correct.
Providing organization name, organizational unit, and location details is part of the CSR generation process, as this information is used in the certificate.
- D. Correct.
Generating a private key is a crucial step in CSR creation, as it is used to sign the certificate request and must be kept secure.
- E. Incorrect.
Uploading the signed certificate to the VCSA is a post-creation step, not part of the CSR generation process.