You can import certificates, create a certificate signing request (CSR), generate self-signed certificates, and import a certificate revocation list (CRL).

After you install NSX-T Data Center, the manager nodes and cluster have self-signed certificates. To improve security, it is highly recommended that you replace the self-signed certificates with CA-signed certificates.