An organization wants to ensure that all entities trust any certificate generated internally in the organization. What should be used to generate these certificates?

Individual users' private keys are used to sign and encrypt their communications but do not serve as a source for generating certificates. Each user's private key is unique and not suitable for creating a trusted certificate for the entire organization, as it would not be recognized by other entities.

Similar to individual users' private keys, individual systems' private keys are specific to those systems and are used for securing communications. They cannot be used to generate certificates that would be universally trusted across the organization, as they lack a centralized trust model.

A certificate repository server is designed to store and manage issued certificates rather than generate them. While it is useful for certificate retrieval and validation, it does not have the capability to issue certificates, which is the primary function of a certificate authority server.