Regenerate Self-Signed ESXi Host Certificates after changing Hostname
brief, General, VMware vSphere, X.509 PKI
By default the self-signed certificates on your ESXi hosts will have a common name of localhost.localdomain.
So after changing the hostname of the ESXi hosts, you have to regenerate the self-signed certificates to ensure the correct common name is defined.
This can be done by executing the following commands directly on the ESXi hosts SSH shell.
Regenerate the self-signed certificate [root@ESXi-Host:~] /sbin/generate-certificates Restart the hostd and vpxa services [root@ESXi-Host:~] /etc/init.d/hostd restart && /etc/init.d/vpxa restart && /etc/init.d/rhttpproxy restart
Links
Regenerate the Self-Signed Certificate on All Hosts
https://docs.vmware.com/en/VMware-Cloud-Foundation/5.2/vcf-deploy/GUID-20A4FD73-EB40-403A-99FF-DAD9E8F9E456.html