apparently this is common issue. This happens when your certificate has, for example workflow.domain.com SAN and your server name is wfserver.domain.local. When you try to use the wizard it fails with an error:
'...Could not establish trust relationship for the SSL/TLS secure channel.'.
If your certificate is created for specific SAN, that would also probably mean that you would not like to use server name as workflow endpoint but some other DNS name.
If this is the case, then you have to do the following on your WF server:
Run:
Get-SBClientConfiguration -Namespaces 'WorkflowDefaultNamespace' -Verbose;
This will output the SB farm endpoint, and this is actually what is causing the issue.
Next
Stop-SBFarm
Set-SBFarm -FarmDns SPWorkflow.domain.com
Update-SBHost
Start-SBFarm
Check if the endpoint is changed
Get-SBClientConfiguration -Namespaces 'WorkflowDefaultNamespace' -Verbose;
Add WF Host
$WFRunAsPassword = ConvertTo-SecureString -AsPlainText -Force -String '' -Verbose
And finally add WF host to WF farm:
Add-WFHost -WFFarmDBConnectionString 'Data Source=dbserver;Initial Catalog=SP2016_Prod_WF_Management;Integrated Security=True;Encrypt=False' -RunAsPassword $WFRunAsPassword -EnableFirewallRules $true -SBClientConfiguration $SBClientConfiguration -Verbose;
Hope that helps