VCP-VCF Administrator 2024 Question 263
Select 4You are working as a VMware Cloud Foundation Administrator and need to replace the self-signed certificate for the vCenter Server with a CA-signed certificate. Which steps must be completed to successfully import the CA-signed certificate?
- A
Generate a Certificate Signing Request (CSR) from the vSphere Client.
- B
Submit the CSR to a Certificate Authority (CA) and download the signed certificate.
- C
Directly upload the CA-signed certificate to the vCenter Server without any additional files.
- D
Include the complete certificate chain and private key during the import process.
- E
Restart the vCenter Server services to apply the new certificate.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To import a CA-signed certificate into vCenter Server, the process involves generating a CSR, submitting it to a CA, obtaining the signed certificate, and importing it along with the certificate chain and private key. Restarting the vCenter services ensures the new certificate is applied. Skipping any of these steps might result in an invalid or incomplete certificate configuration.
- A. Correct.
Correct: Generating a CSR is the first step in obtaining a CA-signed certificate. This file contains the information needed by the CA to issue the certificate.
- B. Correct.
Correct: After generating the CSR, it must be submitted to the CA, which signs the request and provides the certificate.
- C. Incorrect.
Incorrect: The CA-signed certificate cannot be directly uploaded. It must be accompanied by the certificate chain and private key for proper configuration.
- D. Correct.
Correct: The complete certificate chain and private key are required to establish a trust relationship and ensure secure communication.
- E. Correct.
Correct: Restarting the vCenter Server services is necessary for the new certificate to take effect.