What is the correct way to replace the certificate on an existing vCenter Server that is part of a vCenter HA
Put the vCenter HA in Maintenance mode, replace the certificate, exit Maintenance mode.
Shut down Passive and Witness nodes and replace the certificate on the Active node.
Remove the Passive and Witness nodes, replace the certificate, reconfigure the cluster.
Replace the certificate while all nodes are participating in the cluster.
Edit the cluster configuration and select Remove.
Delete the Passive node and the Witness node.
On the Active node, which is now a standalone vCenter Server Appliance, replace the machine SSL
Certificate with a custom certificate.