2V0-620 · Question #192
By default, each ESXi 6.x host is provisioned with a certificate from which root certificate authority?
The correct answer is B. VMware Certificate Authority. vSphere 6.x introduced the VMware Certificate Authority (VMCA), which automatically acts as the root CA for provisioning SSL certificates to all ESXi hosts by default.
Question
By default, each ESXi 6.x host is provisioned with a certificate from which root certificate authority?
Options
- ARedHat Certificate Authority
- BVMware Certificate Authority
- CDigiCert Certificate Authority
- DVerisign Certificate Authority
How the community answered
(49 responses)- A4% (2)
- B94% (46)
- C2% (1)
Why each option
vSphere 6.x introduced the VMware Certificate Authority (VMCA), which automatically acts as the root CA for provisioning SSL certificates to all ESXi hosts by default.
RedHat Certificate Authority is not a component of VMware infrastructure and plays no role in vSphere certificate management.
VMCA is a built-in certificate authority that ships as part of the Platform Services Controller in vSphere 6.x; it signs and provisions certificates for ESXi hosts and vCenter components at deployment time, serving as the trusted root CA unless the administrator replaces or subordinates it to an enterprise CA.
DigiCert is a public commercial certificate authority; while it can be used as an enterprise CA in a subordinate VMCA configuration, it is not the default root CA for ESXi hosts.
Verisign is a public commercial CA and is not involved in the default certificate provisioning workflow for ESXi 6.x hosts.
Concept tested: VMware Certificate Authority default ESXi host certificate provisioning
Source: https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.psc.doc/GUID-2C8E7F6B-B4B3-4BE1-AF34-0A9ECC344F7C.html
Topics
Community Discussion
No community discussion yet for this question.