2V0-622 · Question #100
When importing an existing SSL certificate into vSphere Replication Server, which file format is required?
The correct answer is A. PKCS#12. vSphere Replication Server requires SSL certificates to be in PKCS#12 format because this format encapsulates both the certificate and the private key in a single password-protected file, which is the only format the import process accepts.
Question
When importing an existing SSL certificate into vSphere Replication Server, which file format is required?
Options
- APKCS#12
- BDER
- CPEM
- DPKCS#7
How the community answered
(15 responses)- A93% (14)
- C7% (1)
Why each option
vSphere Replication Server requires SSL certificates to be in PKCS#12 format because this format encapsulates both the certificate and the private key in a single password-protected file, which is the only format the import process accepts.
PKCS#12 (also known as PFX) is a binary archive format that bundles the server certificate, any intermediate CA certificates, and the private key into one encrypted file. vSphere Replication's certificate import tooling specifically requires this combined format so that both the certificate and its corresponding private key are provided together during the import process.
DER is a binary encoding of a certificate only and does not include the private key, making it insufficient for the vSphere Replication Server import which requires both.
PEM is a Base64-encoded certificate format commonly used in Linux environments, but it is not the format required by the vSphere Replication Server certificate import workflow.
PKCS#7 is used to represent certificate chains or signed data but does not bundle private keys, so it cannot satisfy the vSphere Replication Server import requirement.
Concept tested: vSphere Replication Server SSL certificate import format
Source: https://docs.vmware.com/en/vSphere-Replication/8.8/com.vmware.vsphere.replication-admin.doc/GUID-ssl-certificate-replacement.html
Topics
Community Discussion
No community discussion yet for this question.