Implmentation guide.

Note: DNS over HTTPS and DNS over TLS are not supported on Grid Master or Grid Master Candidate.

DNS over TLS and DNS over HTTPS require the vDCA (virtual DNS Cache Acceleration) or vADP (virtual Advanced DNS Protection Software) service to be licensed and enabled.

You should update the DNS server appliances to use proper certificates instead of the default self-signed ones.