Question

A security team requires that the Cisco UCS Manager HTTPS interface present a certificate signed by the organization's internal Certificate Authority instead of the default self-signed certificate. After creating a key ring and generating a certificate request, which sequence correctly completes the trusted-certificate deployment on the fabric interconnect?

Accepted Answer

Create a Trusted Point containing the CA chain, import the CA-signed certificate into the key ring referencing that Trusted Point, then apply the key ring to the HTTPS service

Answer

Import the CA-signed certificate directly into the default key ring and reboot both fabric interconnects to activate it

Answer

Paste the CA-signed certificate into the CIMC certificate store and enable certificate pass-through to UCS Manager

Answer

Enable Strong Password policy and disable HTTP, which forces UCS Manager to auto-generate a CA-trusted certificate