I install ePO 5.1 and replace certificate with our CA issued. All works as expected with one issue. ePO still use AH_servername certificate in it's configuration. It's possible change this to our CA certificate? After scanning ePO server with Nessus I got this Warning:
The identities known by Nessus are :
The Common Name in the certificate is :
It's not possible to replace the root certificate used for agent/server communication, I'm afraid.