If you are planning to use VMCS as subordinate CA, please see the KB: 2112016(https://kb.vmware.com/s/article/2112016) which explains the same scenario and procedure to do. As you are performing the changes at vCenter level, all the hosts connected to the vcenter will be affected.
Sincerely,
Rahul Parmar
VMware Support Moderator