What is a guideline for managing local certificates on AOS-CX switches?

Question

Options

• AUnderstand that the switch must use the same certificate for all usages, such as its HTTPS server
• BCreate a self-signed certificate online on the switch because AOS-CX switches do not support CA-
• CBefore installing the local certificate, create a trust anchor (TA) profile with the root CA certificate
• DInstall an Online Certificate Status Protocol (OCSP) certificate to simplify the process of enrolling

• A
  3% (2)
• B
  15% (9)
• C
  73% (43)
• D
  8% (5)

Explanation

AOS-CX switches use certificates for various purposes, such as securing HTTPS access to the switch's web interface, authenticating the switch as a RadSec client, or securing other communications. Managing local certificates on AOS-CX switches involves ensuring that the switch trusts the certificate authority (CA) that issued the certificate, which is critical for proper operation. Option C, "Before installing the local certificate, create a trust anchor (TA) profile with the root CA certificate for the certificate that you will install," is correct. A trust anchor (TA) profile on AOS-CX switches contains the root CA certificate (or intermediate CA certificate) that issued the local certificate. This TA profile allows the switch to validate the certificate chain when the local certificate is installed. For example, if you install a CA-signed certificate for the HTTPS server, the switch needs the root CA certificate in a TA profile to trust the certificate. This is a standard guideline for certificate management on AOS-CX switches to ensure secure and proper

No community discussion yet for this question.