A customs has requested a vSphere 6.5 deployment design where ESXi hosts are provisioned with Auto Deploy. The customer requires that certificates can be automatically refreshed and renewed from the vSphere Web Client for ESXi hosts.

Which certificate policy should be configured for vCenter Server?