VMware vSphere 6 Advanced Design (VCAP6-DCV Design) — Question 27

A customer has requested a vSphere 6.5 deployment design where ESXi hosts are provisioned with Auto Deploy. The customer requires that certificates can be automatically refreshed and renewed from the vSphere Web Client for ESXi hosts.
Which certificate policy should be configured for vCenter Server?

Answer options

• A. Thumbprint Mode
• B. VMware Certificate Authority
• C. Custom Certificate Authority
• D. Subordinate Certificate Authority

Correct answer: B

Explanation

The VMware Certificate Authority is designed to manage and automate the lifecycle of certificates in a vSphere environment, including automatic renewal through the vSphere Web Client. The other options do not provide the same level of automation and management for certificate renewal, making them less suitable for the customer's requirements.