In enterprise setups, the VMware CA can forward requests to a Venafi TPP server. vCert transparently supports this. Just set the appropriate policy name:
Changing certificates often requires a restart of the vpxd service or the entire appliance. Schedule these operations during a maintenance window to avoid disrupting vCenter connectivity for administrators and monitoring tools. vmware vcert tool
You're looking for information on the VMware vCert tool! In enterprise setups, the VMware CA can forward
cp -r /etc/vmware-vpx/ssl /etc/vmware-vpx/ssl-backup-$(date +%Y%m%d) In enterprise setups