If your environment uses Active Directory over LDAPS and the Active Directory server's certificate is replaced, you must re-establish the trust between the SDDC components and Active Directory.