When deploying a VSX Gateway managed by SmartCenter Server, how many Certificate Authorities will the deployment have?

Question

Options

• AOne, shared by all components
• BTwo; one for the SmartCenter Server and one shared by all Virtual Systems and Virtual Routers
• CThree; one for the SmartCenter Server, one shared by all Virtual Systems and one shared by
• DOne for each Virtual System and Virtual Router and Configured on the VSX Gateway
• EOne for each Virtual System configured on the VSX Gateway

• A
  93% (57)
• C
  2% (1)
• D
  3% (2)
• E
  2% (1)

Explanation

In a VSX Gateway deployment managed by SmartCenter Server, a single Certificate Authority is created and hosted by the SmartCenter Server, and every component in the deployment - the VSX Gateway, all Virtual Systems, and all Virtual Routers - trusts and uses that same CA. Options B and C are wrong because they introduce separate CAs for SmartCenter versus virtual components, which doesn't reflect how Check Point's PKI works in a VSX environment; the SmartCenter CA covers everything. Options D and E are wrong because they suggest each Virtual System or Virtual Router receives its own CA, which would create unnecessary complexity and is not how VSX certificate management is designed. The simplest mental model is to tie the CA count to the SmartCenter count: one SmartCenter = one CA, regardless of how many virtual components sit beneath it.

No community discussion yet for this question.