After enabling auto_encrypt, where do Consul clients store the certificates that are automatically generated by the Consul CA?

After enabling auto_encrypt, where do Consul clients store the certificates that are automatically generated by the Consul CA?
A . in the same directory of the Consul agent configuration
B. the local certificate store on the client
C. on the root drive on the client in the .consul directory
D. they are stored in memory

View Answer

Answer: D

Explanation:

With auto-encryption, you can configure the Consul servers to automatically distribute certificates to the clients. To use this feature, you will need to configure clients to automatically get the certificates from the server. This method stores the certificates in memory, they are not persisted. https://learn.hashicorp.com/consul/security-networking/certificates#configure-the-clients