When importing an existing SSL certificate into vSphere Replication Server, which file format is required?

PKCS#12 (file extension .pfx or .p12) is the only format accepted by vSphere Replication Server for certificate import because it encapsulates the signed certificate, any intermediate CA certificates, and the corresponding private key together, which the appliance needs to replace its SSL identity completely.

DER is a binary encoding format for certificates only and does not contain the private key, so it cannot satisfy the requirement for a complete SSL certificate replacement.

PEM is a base64-encoded certificate format commonly used on Linux systems, but vSphere Replication Server's import wizard requires the PKCS#12 container format, not standalone PEM files.

PKCS#7 is used to bundle certificate chains without private keys and is not supported for SSL certificate import into the vSphere Replication Server appliance.