Exam4Training

Which of the following certificate authorities (CAs) are supported by Consul?

Certificates are a critical component of Consul Connect.

Which of the following certificate authorities (CAs) are supported by Consul? (select three)

A. Active Directory-integrated CA

B. Vault

C. built-in Consul CA

D. AWS ACM Private CA

E. OpenSSL running on RedHat

Answer: B,C,D

Explanation:

The CA provider abstraction enables Consul to support multiple systems for storing and signing certificates. Consul ships with a built-in CA which generates and stores the root certificate and private key on the Consul servers. Consul also has built-in support for Vault as a CA. With Vault, the root certificate and private key material remain with the Vault cluster. As of Consul 1.7, AWS ACM Private CA is supported.

If no specific provider is configured when Connect is enabled, the built-in Consul CA provider will be used and a private key and root certificate will be generated automatically.

Exit mobile version