An administrator would like to use the VMware Certificate Authority (VMCA) as an Intermediate Certificate
Authority (CA). The first two steps performed are:
Replace the Root Certificate
Replace Machine Certificates (Intermediate CA)
Which two steps would need to be performed next? (Choose two.)

A.
Replace Solution User Certificates (Intermediate CA)

B.
Replace the VMware Directory Service Certificate (Intermediate CA)

C.
Replace the VMware Directory Service Certificate

D.
Replace Solution User Certificates

Explanation:

You can replace the VMCA root certificate with a third-party CA-signed certificate that includes VMCA in the certificate chain. Going forward, all certificates that VMCA generates include the full chain. You can replace existing certificates with newly generated certificates. This approach combines the security of third-party CAsigned certificate with the convenience of automated certificate management.
Reference: http://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%
2FGUID-5FE583A2-3737-4B62-A905-5BB38D479AE0.html