Which utility is used to create certificates for the detection servers?

Which utility is used to create certificates for the detection servers?

• A. sslkeytool
• B. keytool
• C. openssl
• D. certutil

Answer: (A)

The essential idea is to generate and install certificates so the detection servers can communicate securely using TLS. In this Symantec DLP setup, a dedicated utility called sslkeytool is used to create and configure the SSL certificates that the detection servers rely on. Using sslkeytool, you generate a private key and a certificate for each detection server (or a CSR to be signed by a CA) and place them into the appropriate keystore that the DLP components use. This keeps the servers’ identities trusted by one another and enables encrypted communication between them. Other tools have different scopes: keytool is Java-specific and manages Java keystores, which isn’t the same as the DLP detection server keystore and its trust configuration; openssl is a general-purpose toolkit for creating and managing certificates and keys but would require additional steps to integrate with the DLP-specific trust stores; certutil works with Windows certificate stores and isn’t tailored to the DLP detection server setup.

The essential idea is to generate and install certificates so the detection servers can communicate securely using TLS. In this Symantec DLP setup, a dedicated utility called sslkeytool is used to create and configure the SSL certificates that the detection servers rely on. Using sslkeytool, you generate a private key and a certificate for each detection server (or a CSR to be signed by a CA) and place them into the appropriate keystore that the DLP components use. This keeps the servers’ identities trusted by one another and enables encrypted communication between them.

Other tools have different scopes: keytool is Java-specific and manages Java keystores, which isn’t the same as the DLP detection server keystore and its trust configuration; openssl is a general-purpose toolkit for creating and managing certificates and keys but would require additional steps to integrate with the DLP-specific trust stores; certutil works with Windows certificate stores and isn’t tailored to the DLP detection server setup.