cisco hyperflex certification 700-905

cisco hyperflex certification 700-905.1. Single Root CA (Single RootCA)If there is a trusted CA, and tens of thousands of clients are authenticating to that CA and requesting their own identity credentials from that CA, the CA server must be extremely busy, even if it is not directly involved in the day-to-day authentication that occurs between clients. To reduce the load on a single CA server, have other servers issue CRLO Finally, it makes sense to have PKI have at least some redundancy, which means that a single root CA server may not be sufficient.A tiered CA with subordinate CAs can choose to deploy intermediate or subordinate CAs (intermediateorsubordinateCAs) to "complement" the root CA if they want to increase redundancy and capacity.The root CA is the "king of the mountain" and delegates authority to the subordinate CAs to create identity certificates for clients and assign certificates to them. This is called a hierarchical PKI topology. The root CA signs the digital certificates of its own subordinate or intermediate CAs, and the subordinate CAs act as the CAs that issue certificates to the clients.hierarchical CA topology.Figure 6-10 Tiered CA Deployment Containing CA6.4 Exam Point Review 315In order for a client to verify the above "chain of authority", it must have a secondary CA's certificate and a root certificate. The root certificate (and the rootCA's public key) is required to verify the digital signature of the subordinate CA, while the certificate of the subordinate CA (and the subordinate CA's) is required to verify the signature of the subordinate CA. If there are multiple subordinate CAs, the client needs to have all devices in the "authorization