CA

In the Ultra Transcenders books

AZ-7002V0-17.25SC-300AZ-802MD-102

Each book explains CA in context, with comparison tables and the common traps.

Terms in this definition

• Entity

  Something like a product or customer that an organisation stores data about. Its characteristics are its attributes, and every individual record is one instance.

• Point-to-site VPN

  Connection type in which single client machines, rather than whole sites, tunnel into an Azure virtual network gateway. App Service gateway-required VNet integration relies on it too.

• RADIUS authentication

  Way of authenticating point-to-site VPN users where the gateway passes credentials on to a RADIUS server, NPS for example, which validates them against on-premises AD DS.

• Microsoft Entra ID

  Cloud identity service from Microsoft, previously named Azure AD, which provides the tenant behind Microsoft 365 and Azure.

Related terms

• AD CS

  Short for Active Directory Certificate Services, a Windows Server role that operates a private certificate authority. Because the certificates it issues are not publicly trusted, services needing a public CA, such as Front Door bring-your-own-certificate, refuse them.

• CSR

  Certificate signing request: your public key plus identifying details, sent to a certificate authority, which returns a signed certificate. VCF Operations can create them for VCF products.

• Microsoft CA

  Certificate authority built on Microsoft AD Certificate Services. Once a suitable template exists and IIS has Basic Authentication on for CertSrv, VCF can have it sign and automatically renew certificates for its parts.

• UEFI CA

  Rather than trusting Windows alone, this generation 2 VM Secure Boot option lets Linux boot loaders run if Microsoft's UEFI Certificate Authority has signed them.

• VMCA

  vCenter's built-in certificate authority, which issues certificates to ESX hosts and vCenter services. VCF Operations can renew certificates it has signed automatically.