LCM can be used to update certs for both primary, replica and data nodes in an Aria Operations cluster, however it does not update certs in cloud proxy.
Aria Operations 18.x and later
VCF Operations 9.x
LCM certificate updates do not update certs on cloud proxy. Cloud proxy is not part of the cluster nor is it tied to the cluster CASA service.
Follow guidelines from the following resource to update certs in cloud proxy using cprc-cli:
Configure a Certificate For Use With Aria Operations Cloud Proxy
refer to the section: Install a new certificate in VMware Aria Operations Cloud Proxy