Configure encrypted vMotion
This is a new option in vSphere 6.5 (but only for the Enterprise Plus edition), in order to secure the vMotion network traffic.
The vMotion encryption feature isn't simply an encrypting of the entire network channel for the vMotion traffic; it's a per-VM setting. There aren't certificates to manage or import on the infrastructural side.
This will be discussed later, in Objective 1.4, because it's related to the VM options.
On the infrastructural side, you will need to configure the proper key servers (as described in Objective 1.3).