Renewing ESXi host certificates with VMCA-signed certificate regardless of vCenter Server configured with custom certificates

Products

• VMware vSphere ESXi
• VMware vCenter Server

Issue/Introduction

This article explains to renew ESXi host certificates with VMCA-signed certificate separately if vCenter Server is configured with custom certificates. 

Environment

VMware vSphere ESXi 

Resolution

Leave vCenter Server setting "vpxd.certmgmt.mode" as default ("vmca") and renew ESXi certificates even if vCenter Server is configured with custom certificates. 
ESXi certificates are generated by VMCA certificates. 

Additional Information

Difference between "Renew" and "Refresh CA Certificates" for ESXi host certificate (managed with VMCA)
Change the ESXi Certificate Mode