A company using Catalyst SD-WAN Manager as its root certificate authority server must generate a root certificate using the vShell (Linux) built into the CLI of Catalyst SD-WAN Manager. Which command must be used to generate the root certificate?

Question

Accepted Answer

D. openssl req -x509 -new-nodes -key XYZ.key -sha256 -days 365 \subj "/C=US/ST=DC/L=DC/O=Cisco/CN=device. The `openssl req -x509` command is specifically used to generate a self-signed certificate, which is necessary for a root Certificate Authority. The `-new-nodes` option generates a new private key, saving it to `XYZ.key`, and then uses this key to create the root certificate with the specified subject details and validity.

Answer

A. openssl genrsa -out ROOTCA.pem 2048 This command `openssl genrsa` only generates an RSA private key and does not create a certificate.

Answer

B. openssl req -x509 -new-nodes -key XYZ.pem -sha256 -days 365 \subj "/C=US/ST=DC/L=DC/O=Cisco/OU=device lab" \-out ABC.key While `openssl req -x509` generates a certificate, the `-key XYZ.pem` option assumes a private key already exists and the output `ABC.key` is an unusual naming convention for a certificate, whereas the question asks to generate a root certificate (implying both key and cert).

Answer

C. openssl genrsa -out ROOTCA.key 2048 Similar to choice A, this command `openssl genrsa` only generates an RSA private key and does not create a certificate.

A company using Catalyst SD-WAN Manager as its root certificate authority server must generate a root certificate using the vShell (Linux) built into the CLI of Catalyst SD-WAN Manager. Which…

Question

Exhibit

Options

How the community answered

Why each option

Topics

Community Discussion