Which two actions are necessary to set the Controller Certificate Authorization mode to indicate a root certificate? (Choose two.)

Choosing a private certificate signing authority indicates that you are using an internal or self-signed certificate infrastructure, where a specific root certificate needs to be trusted by vManage.

Changing the organization name of the Cisco SD-WAN fabric is a fabric-wide identifier and does not directly configure the certificate authorization mode for controller trust.

Simply selecting a Cisco-recommended Controller Certificate Authorization mode does not, by itself, indicate or establish trust for a specific root certificate without the underlying certificate management actions.

To enable vManage to trust and authorize controllers using a private or enterprise root certificate, that specific SSL certificate, or its chain, must be explicitly uploaded to vManage.

Selecting a validity period is part of certificate generation, but it is not one of the two primary actions required to set the authorization mode to indicate the use of a root certificate.