To prevent users from seeing an SSL trust error about the server certificate issuer, which configuration step is essential?

To prevent users from seeing an SSL trust error about the server certificate issuer, which configuration step is essential?

• A. Ensure that users have the certificate's private key.
• B. Ensure that users have the certificate's public key.
• C. Ensure that the server certificate is linked to its respective intermediate and root certificates.
• D. Ensure that users have the server certificate installed.

Answer: (C)

SSL/TLS trust relies on a chain of certificates that connects the server’s certificate to a trusted root authority. When a client validates the certificate, it needs to be able to chain from the server’s leaf certificate up through any intermediate certificates to a root CA already trusted by the client. If intermediate certificates aren’t provided, the client can’t complete the chain, and it will show a trust error about the issuer. The essential step is to configure the server to present the complete certificate chain, linking the server certificate with its intermediate certificates (and, when required, the root bundle). This means installing or attaching a certificate bundle that contains the leaf certificate followed by the necessary intermediate certificates in the correct order. On devices like Citrix ADC, this is done by ensuring the certificate configuration includes the full chain so clients can verify the issuer up to a trusted root.

SSL/TLS trust relies on a chain of certificates that connects the server’s certificate to a trusted root authority. When a client validates the certificate, it needs to be able to chain from the server’s leaf certificate up through any intermediate certificates to a root CA already trusted by the client. If intermediate certificates aren’t provided, the client can’t complete the chain, and it will show a trust error about the issuer.

The essential step is to configure the server to present the complete certificate chain, linking the server certificate with its intermediate certificates (and, when required, the root bundle). This means installing or attaching a certificate bundle that contains the leaf certificate followed by the necessary intermediate certificates in the correct order. On devices like Citrix ADC, this is done by ensuring the certificate configuration includes the full chain so clients can verify the issuer up to a trusted root.