The plug-in package ZIP file that represents a vSphere Client plug-in is typically hosted on a remote Web server. A vCenter Server extension can reference a remotely hosted plug-in package by specifying the Web sever URL in the vCenter Server extension definition. When you register a plug-in as an extension with a vCenter Server instance, the plug-in package ZIP file is downloaded from the remote URL.
The vSphere Client establishes a secure HTTPS connection with the remote Web server that hosts the plug-in packages. Starting with vSphere 6.0 Update 2, you can configure the TLS protocol versions for the vCenter Server Service, VMware vSphere Client Service, VMware Directory Service, Security Token Service and Syslog Collector Service. The TLS protocol versions that you configure for the vCenter Server service must be the same as the protocol versions for all other services.
For more information about supported TLS versions and configurations, see https://kb.vmware.com/s/article/2145796.