VxRail Manager is deployed with a self-signed certificate by default that is likely to be triggered as untrusted by most web browsers, depending on security settings
Replace the default certificate with one that is signed by your organization's root Certification Authority (CA) for production VxRail environments.

The certificates in VxRail are configured with an expiration. Certificate replacement can be performed manually, or auto-renewed starting with VxRail 7.0.350. When auto- renewal is enabled, VxRail Manager automatically contacts the certificate authority for new certificates before the expiration date