My config:
20 ESXi hosts in single Cluster all Auto Deploy hosts. Existing hosts are 6.0.0 Build 4192238. Hosts reboot and host profile applies without issues using build 4192238. I also have NSX configured for the cluster and using Trend Deep Security. UCS hosts with all FC attached storage. One Distributed switch and a few standard switches. Several port groups.
After I updated the Image Profile to 4600944 my hosts now show non-compliant. The only compliance failure that is reported is "Host requires reboot before previously applied configuration changes will take effect". All other host settings are correct and as far as I can tell the hosts are running fine. From my research the only setting in my host profile that may be causing this is the ScratchConfig settings however that settings has not changed and is being set correctly on the patched hosts. I have tried manually applying the host profile and rebooting several times. The compliance error does not go away.
I plan to open a ticket with VMware but thought maybe someone else in the community may have hit this bug already.