Installing a cluster on vSphere in a restricted network", Collapse section "1.3. Use of vSphere Certificate Manager: The vSphere Certificate Manager can be used to: Implement Default Certificates Replace VMCA Certificate with a custom CA Certificate Replace all vSphere Certificates and Keys with custom CA Certificates and Keys Implement Default Certificates (use Option 4 or 8): The default value is. Similarly, many customers enjoy the separation of infrastructure trust from the rest of the enterprise PKI infrastructure, from a separation of duties perspective as well as avoiding potential dependency loops if parts of the enterprise PKI infrastructure run inside vSphere. Initial Operator configuration", Expand section "1.3. : Second, there are now REST APIs for handling vCenter Server certificates, as part of the larger effort to ensure APIs are present for nearly everything in vSphere: There are also additional simplifications around certificates for services in both vCenter Server and ESXi, so that the number of certificates to manage is much lower, whether you are managing them manually or allowing the VMware Certificate Authority (VMCA) that is part of vCenter Server to manage the cluster certificates for you. During that process, you download the content that is required and use it to populate a mirror registry with the packages that you need to install a cluster and generate the installation program. Sample install-config.yaml file for VMware vSphere, 1.2.9.2. certificate manager tool do not support vcenter ha systems You must keep both the installation program and the files that the installation program creates after you finish installing the cluster. vSphere 7.0 Certificate Management | Stephan McTighe Machine requirements for a cluster with user-provisioned infrastructure", Expand section "1.2.6. The address block must not overlap with any other network block. The following command adds all the certificates in a file called myFile.ext to a new file called newFile.ext. Probing every 5 or 10 seconds, with two successful requests to become healthy and three to become unhealthy, are well-tested values.