An administrator would like to use the VMware Certificate Authority (VMCA) as an Intermediate Certificate Authority (CA). The first two steps performed are: - Replace the Root Certificate - Replace…

The correct answer is A. Replace Solution User Certificates (Intermediate CA) C. Replace the VMware Directory Service Certificate. You can replace the VMCA root certificate with a third-party CA-signed certificate that includes VMCA in the certificate chain. Going forward, all certificates that VMCA generates include the full chain. You can replace existing certificates with newly generated certificates…

Section 1 – Configure and Administer vSphere 6.x Security

Question

An administrator would like to use the VMware Certificate Authority (VMCA) as an Intermediate Certificate Authority (CA). The first two steps performed are:

Replace the Root Certificate
Replace Machine Certificates (Intermediate CA)

Which two steps would need to be performed next? (Choose two.)

Options

AReplace Solution User Certificates (Intermediate CA)
BReplace the VMware Directory Service Certificate (Intermediate CA)
CReplace the VMware Directory Service Certificate
DReplace Solution User Certificates

How the community answered

(15 responses)

A
80% (12)
B
13% (2)
D
7% (1)

Explanation

You can replace the VMCA root certificate with a third-party CA-signed certificate that includes VMCA in the certificate chain. Going forward, all certificates that VMCA generates include the full chain. You can replace existing certificates with newly generated certificates. This approach combines the security of third-party CA-signed certificate with the convenience of automated certificate management. 60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-5FE583A2-3737-4B62- A905-5BB38D479AE0.html

Topics

#VMCA#certificate replacement#Intermediate CA#solution user certificates

Community Discussion

No community discussion yet for this question.

Full 2V0-621D Practice