Is an external Certification Authority mandatory for NSE deployments?

Is an external Certification Authority mandatory for NSE deployments?

• A. FALSE
• B. NA
• C. TRUE
• D. NA

Answer: (C)

In NSE deployments, establishing trust through TLS certificates relies on a Certification Authority that is trusted by all clients and components. Using a CA-signed certificate from an external authority ensures a verifiable identity for the appliance and avoids trust warnings in browsers and clients. It also supports scenarios like mutual authentication if configured and meets enterprise security policies that often prohibit self-signed or internal CA certificates. Because of these requirements, an external Certification Authority is mandatory for NSE deployments.

In NSE deployments, establishing trust through TLS certificates relies on a Certification Authority that is trusted by all clients and components. Using a CA-signed certificate from an external authority ensures a verifiable identity for the appliance and avoids trust warnings in browsers and clients. It also supports scenarios like mutual authentication if configured and meets enterprise security policies that often prohibit self-signed or internal CA certificates. Because of these requirements, an external Certification Authority is mandatory for NSE deployments.