If you change the VMCA Root CA Certificate either by regenerating a new VMCA Default Root CA or by installing a Custom VMCA Root CA then the PSC you perform this action on will revert to a Machine SSL Certificate that contains only it’s local FQDN and will break the PSC HA environment.
If you perform this action, then you must generate a new PSC HA Certificate and install this Certificate in all PSCs participating in PSC HA.
See the sections ‘Preparing a Certificate‘ and ‘Replacing the Machine SSL Certificate‘ earlier in this guide.
have you tried reinstalling? 