Upgrade the Trust Authority vCenter Server and Trust Authority Hosts.
Starting with vSphere 7.0, you can take advantage of VMware® vSphere Trust Authority™. vSphere Trust Authority is a foundational technology that enhances workload security. vSphere Trust Authority establishes a greater level of trust in your organization by associating an ESXi host's hardware root of trust to the workload itself.
The best practice for upgrading a vSphere Trust Authority infrastructure is to upgrade the Trust Authority vCenter Server and Trust Authority Hosts first. In this way, you get the most benefit from the latest vSphere Trust Authority features. However, you can perform separate, standalone upgrades of vCenter Server and ESXi hosts to fit specific business reasons. To learn about upgrading the Trust Authority Cluster vCenter Server see "vSphere Trust Authority Life Cycle" in the vSphere Security guide.