You can change the certificates of all VxRail Manager instances as well as the certificates for all Cloud Foundation components through SDDC Manager. See Managing Certificates for Cloud Foundation Components in VMware Cloud Foundation Operations and Administration Guide.