Does the server have light-out mgmt? You can upgrade the BIOS via that. That takes care of the host. ESXi updates can be done through a vCenter.
SSL certificates took on an important role in vSphere 5.1, and managing the certificates that the vSphere environment required became another challenge that vSphere administrators needed to tackle.