An administrator is tasked with configuring certificates for a VMware software-defined data center (SDDC) based on the following requirements: - All certificates should use certificates trusted by…

Replacing the VMCA certificate with a self-signed certificate would make it untrusted by the Enterprise CA, directly violating the requirement for corporate trust.

Replacing the machine SSL certificates with custom certificates generated from the Enterprise CA directly ensures that these critical certificates are trusted by the corporate infrastructure, meeting the trust requirement.

Replacing machine SSL certificates with trusted certificates generated from the VMware CA would only be trusted if the VMware CA itself is trusted by the Enterprise CA, which is addressed by option D, but C does not inherently guarantee trust by the *Enterprise* CA without that prerequisite.

Replacing the VMware Certificate Authority (VMCA) certificate with a custom certificate generated from the Enterprise CA establishes a trust chain where VMCA-issued certificates are implicitly trusted by the Enterprise CA, thus minimizing ongoing management by allowing VMCA to issue trusted certificates.

Replacing the solution user certificates with custom certificates generated from the Enterprise CA ensures that these authentication certificates are also trusted by the corporate infrastructure, adhering to the security policy.

Replacing solution user certificates with trusted certificates generated from the VMware CA would only ensure corporate trust if the VMware CA is configured to be trusted by the Enterprise CA, which is not guaranteed by this action alone and thus does not directly satisfy the requirement for Enterprise CA trust.