I've a deployment that is currently stuck at CustomizeOS, I've seen this issue before and uninstalling/re-installing the GuestAgent normally does the trick.
I'm using a different vCenter as the endpoint this time around but I think I have everything for that vCenter setup correctly.
I've checked both the VCACGuestAgentService.log and the GuestAgent.log ... both look okay. The cert.pem file is there as expected.
Is there anything else I should be looking at or missing ?