A network administrator is trying to convert from LDAP to LDAPS for VPN user authentication on a Cisco FTD. Which action must be taken on the Cisco FTD objects to accomplish this task?

A "Key Chain object" is primarily used for authentication protocols like EIGRP or OSPF, or for IPSec, not directly for acquiring or trusting LDAPS server certificates.

When converting from LDAP to LDAPS, the Cisco FTD needs to establish a secure, encrypted connection to the LDAP server, which requires validating the LDAP server's certificate. To facilitate this, a "Certificate Enrollment object" must be created and configured on the Cisco FTD to enroll with a Certificate Authority or import the LDAPS server's certificate, which is then trusted by the FTD for secure LDAPS communication.

While cipher suites are important for secure communication, identifying them and creating a "Cipher Suite List object" is a secondary step; the fundamental requirement for LDAPS is the server certificate, which is handled by enrollment.

A "Policy List object" typically defines sequences of policies, but it doesn't directly handle the acquisition or management of certificates required for the underlying secure communication of LDAPS.