VCP-VCF Administrator 2024 Question 264
Select 3You are tasked with importing a CA-signed certificate into the VMware Cloud Foundation environment to secure communication for the SDDC Manager. Which of the following steps must you perform to successfully complete this task?
- A
Generate a Certificate Signing Request (CSR) from the SDDC Manager UI or CLI.
- B
Submit the CSR to a Certificate Authority to obtain the signed certificate.
- C
Directly upload the CA root certificate to the NSX Manager without importing it into the SDDC Manager.
- D
Import the CA-signed certificate and the corresponding private key into the SDDC Manager.
- E
Restart all management domain components after importing the certificate to apply the changes.
Show answer and explanation
Correct answers: A, B, D
Explanation
To successfully import a CA-signed certificate into the VMware Cloud Foundation environment, you must generate a Certificate Signing Request (CSR), submit the CSR to a Certificate Authority to obtain the signed certificate, and then import the CA-signed certificate along with its private key into the SDDC Manager. This ensures secure communication for management components. Restarting management domain components is not typically needed, and directly uploading to NSX Manager bypasses the proper certificate management process.
- A. Correct.
Generating a Certificate Signing Request (CSR) is the first step in obtaining a CA-signed certificate. This step is necessary to provide the Certificate Authority with the information required to create a signed certificate.
- B. Correct.
Submitting the CSR to a Certificate Authority is essential to obtain the signed certificate, which will be imported into the VMware Cloud Foundation environment.
- C. Incorrect.
Directly uploading the CA root certificate to NSX Manager without importing it into the SDDC Manager is not a valid step in this process. The certificate must first be managed through the SDDC Manager for consistent configuration.
- D. Correct.
Importing the CA-signed certificate and the corresponding private key into the SDDC Manager is a required step to complete the process and enable secure communication.
- E. Incorrect.
Restarting all management domain components after importing the certificate is not typically required, as the certificate changes are applied without needing a full restart.