Replace the default or expired certificates on the ESXi hosts with certificates that are generated by using the CertGenVVD utility.

In each cluster, you configure the certificate mode for hosts to support custom certificate authorities (CAs) and replace the old certificates with certificates that are signed by a custom CA.