VMware NSX 4.x Professional (2024) — Question 13

An administrator has been tasked with implementing the SSL certificates for the NSX Manager Cluster VIP.
Which is the correct way to implement this change?

Answer options

• A. Send an API call to https://<nsx-mgr>/api/vl/cluster/api-certificate?action=set_cluster_certificate&certificate_id=<certificate_id>
• B. Send an API call to https://<nsx-mgr>/api/vl/node/services/http?action=apply_certificate&certificate_id=<certificate_id>
• C. SSH as admin into the NSX manager with the cluster VIP IP and run nsxcli cluster certificate node install <certificate_id>
• D. SSH as admin into the NSX manager with the cluster VIP IP and run nsxcli cluster certificate vip install <certificate_id>

Correct answer: A

Explanation

The correct answer is A because this API call specifically sets the cluster certificate for the NSX Manager Cluster VIP. Option B is incorrect as it applies a certificate to node services rather than directly to the cluster. Options C and D involve SSH commands that do not utilize the API and are not the designated method for implementing the SSL certificates for the cluster VIP.