To set the Controller Certificate Authorization mode to indicate a root certificate, which two actions are required?

To use a root certificate for Controller Certificate Authorization, you must select a private certificate signing authority. This allows you to generate and manage your own certificates, including the root certificate, rather than relying on a third-party public CA. Additionally, you need to upload an SSL certificate to vManage. This certificate will be signed by your private root CA and used by the controllers for authentication within the SD-WAN fabric. Changing the organization name or selecting a validity period are general configuration steps but not specific to enabling root certificate authorization. Selecting the Cisco-recommended mode might be a good practice, but it doesn't directly enable the use of a root certificate.