Hi BarryUWSEFS

VMware Knowledge Base  describes detailed steps of creating a certificate signing request > Submitting it to a CA and then how to import the certificate on connection server. Once you follow it carefully, you will be able to replace connection server cert easily.

Once you import the new cert in connection server, rename the old cert friendly name to 'VDM_OLD' or something else. Only one active cert can have 'VDM' friendly name at a time under cert store on all connection servers.