Distributing a vCenter and a host image that has been configured for security.

We manage multiple sites that require DoD Security settings to be configured. All of our sites are built and configured the same except for FQDN, IPs, and certificates from a local CA. All sites are remote and have a system admin that is not an expert. They just monitor and manage basic things. All major changes and updates are managed by us and sent to the sites as a powershell script for them to run.

We have configured our lab system vCenter and Hosts to meet the DoD security and my goal is to export vCenter as an OVA and create backup files of the hosts to send to the sites to import.

I know I need to change the hostname, IPs, and Certs, but is there anything else I'm missing? Any suggestions are appreciated.