You need to create a new SSL/TLS certificate in Azure Key Vault using a non-integrated Certificate Authority (CA). Which sequence of steps should you perform to generate the Certificate Signing Request (CSR) and complete the certificate creation in Key Vault?
- 1Initiate the certificate creation operation in Azure Key Vault with the Issuer set to Unknown.
- 2Download the Certificate Signing Request (CSR) from the pending certificate operation in Azure Key Vault.
- 3Submit the Certificate Signing Request (CSR) to the external Certificate Authority (CA) and download the signed certificate.
- 4Merge the signed certificate from the CA back into the pending certificate operation in Azure Key Vault.
Cevap
The correct sequence starts with initiating the certificate creation operation in Key Vault with the Issuer set to Unknown. Next, you download the generated Certificate Signing Request (CSR). You then submit this CSR to the external Certificate Authority (CA) and retrieve the signed certificate. Finally, you merge the signed certificate back into the pending certificate operation in Key Vault to complete the process.
The correct process involves first initiating the certificate operation with the issuer set to Unknown, which generates the CSR. The CSR is then retrieved and signed by the external CA. Finally, the signed certificate is merged back into the pending operation to match the private key.
Adım Adım Çözüm
Anahtar Kavram
Creating certificates in Azure Key Vault using a non-integrated CA requires generating a CSR, obtaining the signed certificate externally, and merging it back to associate it with the private key.