Which two certificates need to be uploaded to VOS servers for CA Signed certificate management? (Choose two.)

Question

Options

• ACA Certificate:tomcat
• BCA Signed Certificate from CSR Request:tomcat
• C3rd party signed Certificate
• DCA Certificate:tomcat-trust
• ECA Signed Certificate from CSR Request:tomcat-trust

• A
  7% (2)
• B
  13% (4)
• C
  3% (1)
• D
  77% (23)

Explanation

On VOS (Virtualized Operating System) servers, CA-signed certificate management requires uploading to the trust store (tomcat-trust), not the standard tomcat store. Option D (CA Certificate:tomcat-trust) is correct because the CA's root/intermediate certificate must be placed in the trust store so the server can validate the certificate chain. Option E (CA Signed Certificate from CSR Request:tomcat-trust) is correct because the signed certificate returned from the CA after your CSR submission must also be uploaded to tomcat-trust to complete the trusted certificate binding.

Why the distractors are wrong:

• A & B point to :tomcat (the identity store) rather than :tomcat-trust - the trust store is the correct destination for externally-signed certificates in this workflow.
• C ("3rd party signed Certificate") is too generic and doesn't map to a specific upload target or certificate type recognized by the VOS certificate management interface.

Memory tip: Think "trust what you didn't generate yourself" - both the CA's own cert and the cert it signed for you are external authorities, so both belong in the trust store (-trust). If it came from outside, it goes to tomcat-trust.

No community discussion yet for this question.