A cloud architect is planning to scale out the small deployment of vRealize Automation to address high availability requirements. When creating an implementation plan, which prerequisite should be…

Question

Options

• ARequest certificate containing VIP FQDN for each Organization for VMware Identity Manager VIP
• BRequest Certificate Authority (CA)-signed certificate containing the VIP FQDN and the FQDN of
• CRequest Certificate Authority (CA)-signed certificate containing the VIP FQDN and the FQDN of
• DRequest certificate containing VIP FQDN for each Organization for vRealize Automation VIP

• A
  12% (3)
• B
  4% (1)
• C
  81% (21)
• D
  4% (1)

Explanation

When scaling vRealize Automation (vRA) to high availability, a CA-signed certificate is required - not a self-signed one - because it must be trusted across all nodes and the load balancer. The certificate must contain both the VIP FQDN (the load balancer's address that clients connect to) and the FQDN of each individual vRA node, since traffic can be routed to any node behind the VIP. This is the core prerequisite before building the HA cluster, making option C correct.

Why the distractors are wrong:

• A & D are wrong because they reference per-Organization certificates or describe non-CA certificates - vRA HA requires a CA-signed cert, not an internally generated one, to establish trust across the cluster.
• B is wrong because it likely targets the wrong component (such as vIDM/Identity Manager nodes instead of vRA appliance nodes) - B and C are close, but C correctly identifies the vRA nodes as the ones whose FQDNs must be included.

Memory tip: Think of HA certificates as needing to cover "the front door AND every room behind it" - the VIP FQDN is the front door (load balancer), and each node FQDN is a room. A CA-signed cert is required because self-signed certs can't scale across multiple nodes in a trusted way.

No community discussion yet for this question.