You manage certificates from the vSphere Client, or by using an API, scripts, or CLIs.

You can manage certificates using different interfaces.

Table 1. Interfaces for Managing Certificates
Interface Description
vSphere Client Web interface (HTML5-based client). See Managing Certificates with the vSphere Client.
vSphere Automation API See VMware vSphere Automation SDKs Programming Guide.
Certificate Management utility Command-line tool that supports Certificate Signing Request (CSR) generation and certificate replacement. See Managing Certificates with the vSphere Certificate Manager Utility.
CLIs for managing certificate and directory services Set of commands for managing certificates, the VMware Endpoint Certificate Store (VECS), and VMware Directory Service (vmdir). See Managing Services and Certificates with CLI Commands.