Successful deployment of a server certificate for GlobalProtect involves two key phases: requesting the certificate and installing it.

First, during the planning and request phase, it is critical to identify all Fully Qualified Domain Names (FQDNs) that the portal and gateways will use. This information is specified in the Subject Alternative Name (SAN) field of the Certificate Signing Request (CSR). This ensures a single certificate can be validated correctly by clients connecting to any of the specified FQDNs.

Second, the private key associated with the certificate must be secured. Best practice dictates encrypting the private key with a passphrase. This passphrase is a critical piece of information required to import and use the private key on the firewall, thus completing the certificate deployment.

A. Encrypted private key and certificate (PKCS12): This describes a specific file format (PKCS#12). While it is a valid way to bundle the required items, it is not the only format (PEM is also common), and it represents the artifacts themselves, not the fundamental "information" needed.

C. Certificate and key files: This is a more general description of the artifacts needed for deployment. However, the question asks for "pieces of information," and the passphrase (a secret) and SANs (a list of names) fit this description more accurately than the files themselves.

1. Palo Alto Networks PAN-OS® Administrator's Guide 10.2, "Device > Certificate Management > Certificates > Obtain Certificates". This section states, "If you are using a single certificate for multiple gateways, you must use a wildcard certificate or a certificate with multiple Subject Alternative Name (SAN) entries." This confirms the requirement for SAN (B) information during the planning phase.

2. Palo Alto Networks PAN-OS® Administrator's Guide 10.2, "Device > Certificate Management > Certificates > Generate a Certificate". In the procedure for generating a certificate (which includes creating a private key), Step 6 requires the administrator to "Enter and confirm a Passphrase for the private key." This establishes the creation and necessity of the passphrase (D).

3. Palo Alto Networks PAN-OS® Administrator's Guide 10.2, "Device > Certificate Management > Certificates > Import a Certificate and Private Key". This section details the import process and includes a field for "Passphrase". The description notes, "If the private key is encrypted, enter the Passphrase." This confirms the passphrase is required information for deploying an encrypted key, which is a security best practice.