We had one Root CA and one Issuing CA, due to some issue Root CA is completely down, we cannot make it up no longer. We have SCCM 2012 , which requires certificate authentication to install and run its agent on clients , certificate will get expire soon on all clients . Now we can not renew it because our Root CA is Down..
We are going to build one new root CA , we have to produce new certificate to all clients
My question here is
Once old certificate expired, will automatically SCCM server will take new one certificate ?