HTTPS signed certificates for plugin registration in 5.5 and 6.0

I successfully deployed our plugin from an Apache HTTP server using both the vCenter MOB interface, as well as running some custom registration software we wrote.   To use HTTP, we modified the vSphere webclient.properties and set allowHttp = true as recommended.


We are investigating deployment of the plugin via HTTPS.  It appears that self-signed certificates do not work when deploying with HTTPS in vSphere 5.5.   Do we need proper signed certs from a CA in 5.5, or should be be able to use self-signed certs?


By the way, a fellow coworker is taking a "What's new in vSphere 6.0" class, and learned that vSphere 6 has access to a VMware Certificate Authority (VMCA) that can be used to self sign certificates for vCenter server.  Is the VMCA something our plugin could use to sign certificates for the register extension step via HTTPS?


E