Starting with vSphere 6, components for license, certificate management and SSO are being handled by the PSC (Platform Services Controller). This new part of a vSphere installation can be configured to be highly available.
I came across an issue where a fresh installation of vCenter Server 6.0 using an external high availability deployment of PSC would fail with a certificate or invalid credentials error. This article describes the issue and how it was solved.