Which keystore would a vSphere Replication administrator use to manually add an additional Certificate Authority certificate?

The hms-truststore.jks is the Java KeyStore used by the vSphere Replication HMS (Hms Management Service) to store trusted Certificate Authority certificates. Administrators manually add CA certificates to this trust store when working with custom or third-party CAs not automatically trusted. This is separate from the keystore holding the server's own identity credentials.

hms-keystore.jks stores the HMS server's own private key and certificate, not trusted CA certificates from external authorities.

certificates.ks is not a recognized or standard vSphere Replication keystore file name for CA trust management.

cacerts.ks is not a standard vSphere Replication keystore; the Java default CA trust store is named cacerts but is not the HMS-specific file used here.