vCenter 6.7 VCSA Post upgrade (From Windows) tasks
VMware Enhanced Authentication Plug
The most under-rated feature and still the essential one for daily life. Download the VMware Enhanced Authentication Plug. It is available by entering https://<fqdn-vCenter>/ui and look at the bottom. Since it is HTML5 it might get not your needed attention.
NTP Time configuration
Second you must configure NTP server. By default it does not do for you. Open web browser to https://<VC_FQDN>:5480/ui and log in with root credentials. Click Time, and then click Edit Time synchronization. From the drop menu under Mode, select NTP and provide your reliable Time server. Press ok. It takes time to apply the settings.
Please do not use host time, it is strongly discouraged from being use. Here is the #vSpherchat discussion.
Password expiration settings
Third, By default vCenter password expires in 90 days and it does not blink any warning lights. Only way to do so is to provide Email for expiration warning. Open web browser to https://<VC_FQDN>:5480/ui and log in with root credentials. Click Administration (Left side) and then Click EDIT Password Expiration Settings. Change Password validity (days) as per your security policy and key in Email for expiration warning.
vCenter Backup Configuration
The best feature in my opinion is allowing vCenter to be backed up over SMB. Configuration is super simplified. Open web browser to https://<VC_FQDN>:5480/ui and log in with root credentials.
#Protip: Do not use any UPN or FQDN while entering credentials for SMB/FTP Path
Click Backup, and then click Edit Backup Schedule. In the Backup location select the protocol of your choice. In the Backup server credentials select the user name (without any backslash or @ sign) and provide Password in the password field. In Schedule select day and time.
#Protip: Select the time but it is in UTC. So that it matches up your backup schedule. This can be confusing when you are living in DST impacted country.
Update Password for VM Customization Specifications
If you have Virtual template with Password embedded in it, then you should re-enter the password for it. It is provided in detailed in KB Article here.