To enable secure CA-signed communication with a service processor or BMC, which certificate type must be installed to verify the server identity?

To enable secure CA-signed communication with a service processor or BMC, which certificate type must be installed to verify the server identity?

• A. Server certificate
• B. Root CA certificate
• C. Client certificate
• D. Intermediate certificate

Answer: (A)

In TLS, the server proves who it is by presenting a server certificate during the handshake. The service processor or BMC must have a server certificate installed so that clients can verify the server’s identity against a trusted CA. The certificate binds the server’s hostname to a public key and is issued by a CA, which the client trusts via the CA’s root (and any needed intermediate) certificates. Root and intermediate certificates support the trust chain, but they aren’t the certificate the server presents to identify itself. A client certificate is for proving the client’s identity to the server, not for verifying the server.

In TLS, the server proves who it is by presenting a server certificate during the handshake. The service processor or BMC must have a server certificate installed so that clients can verify the server’s identity against a trusted CA. The certificate binds the server’s hostname to a public key and is issued by a CA, which the client trusts via the CA’s root (and any needed intermediate) certificates. Root and intermediate certificates support the trust chain, but they aren’t the certificate the server presents to identify itself. A client certificate is for proving the client’s identity to the server, not for verifying the server.