I'm not sure if this is a VMware related question or if it would be better suited for a Microsoft or Security forum.
I managed to successfully install the Root Self-Signed certificate via GPO and now when you go to https://<fqnd> there are no warnings regarding the certificate. Since we've had many iterations of vCenter installed in our organization (and thus system names have changed), I'd like to have an internal CNAME setup that would always be vcenter.whatever.com. That way we could change the name of the server and not have to repoint everyone to the new location. The problem I encountered is, the root self-signed cert doesn't get recognized or applied when you go to the CNAME, only the actual FQDN.
I don't quite understand certificates yet but I'm guessing you need to assign additional addresses to be trusted by this cert somewhere?
Thanks,