I'd like to generate a CSR for the VCSA 6.5's Machine SSL and use internal Windows Server Certificate Service to sign it. the CA requires minimum 4096-bit but it looks like the CSR generated by VMware Certificate Manager is 2048-bit. is there a way to change VMware Certificate Manager to genearte 4096 bit CSR?
You are able to change/update the certool.cfg. You can check if there is parameter available for keysize.
If there is no parameter available you can use OpenSSL to generate the CSR with a 4096 bit keysize.
Please consider marking this answer "correct" or "helpful" if you think your query have been answered correctly.