My Findings On D365FO On-Premise

1. Import the newly generated SSRS certificate in all of the AOS machines and all SSRS machines under Local machines Personal and Trusted Root location Certificates using mmc cert tool  2. Update the Friendly names of SSRS Cert and Thumbprint in CSV files (acl.csv and certificates.csv) in all of the AOS machines and all SSRS machines under Scripts folder 3. Update the newly generated SSRS certificate Thumbprint in the LCS Deployment Settings under SSRS section  4. Perform Update Settings action on the Sandbox / Prod environment from the LCS 

1. Import Service Fabric Server Certificate in current user/local machine 2. Access the Service Explorer using the one of the SF / Orch Server VM name as follows OrcServerFullFQDNName.com 3. Access https://OrcServerFullFQDNName.com:19080/Explorer/index.html#/ and it will pop-up the dialog to select the server certificate installed -> select the certificate to access the website as shown below