You can replace vCenter Server Appliance certificates. Because the Certificate Automation Tool is supported only on Windows, you must replace the certificates by hand.
About this task
Replacing the default SSL certificate and key with a self-signed or CA-signed certificate on vCenter Server Appliance is a manual process. You cannot use the Certificate Automation Tool to update the certificate and key on Linux.
Obtain certificate files (including the certificate and private key).