VCP-VCF Administrator 2024 Question 321
Single answerAn administrator is managing a VMware Cloud Foundation environment and notices that certificate validation errors are appearing for multiple services. Upon investigation, they discover that the certificates have expired. What should the administrator do to resolve this issue?
- A
Use the vSphere Client to manually replace the expired certificates for each service.
- B
Leverage the VMware Cloud Foundation SDDC Manager to regenerate and replace the expired certificates.
- C
Install a third-party tool to automatically renew the certificates for the affected services.
- D
Disable certificate validation temporarily to allow services to function without interruption.
Show answer and explanation
Correct answer: B
Explanation
The correct approach to resolving certificate issues in a VMware Cloud Foundation environment is to use the SDDC Manager. It is the central management tool provided by VMware Cloud Foundation that simplifies certificate management, including regenerating and replacing expired certificates across all services. This ensures consistency, compliance, and security across the environment.
- A. Incorrect.
Using the vSphere Client to manually replace certificates is not recommended in a VMware Cloud Foundation environment as it can lead to inconsistencies and is not the supported method for managing certificates.
- B. Correct.
The VMware Cloud Foundation SDDC Manager provides a centralized tool to regenerate and replace certificates efficiently across all services in the environment, making it the correct and supported approach.
- C. Incorrect.
Installing a third-party tool is not necessary since VMware Cloud Foundation includes built-in tools for managing certificates, and using such tools could introduce additional complexities.
- D. Incorrect.
Disabling certificate validation is a temporary workaround but is not a recommended or secure approach as it leaves the environment vulnerable to security risks.