I have an AD certification authority and my root certificate is about to expire. Thanks in advance for your help with a few questions.
- How do I renew the root certificate?
- When I renew it, what do I do to ensure all domain-joined machines trust it?
- Do all certs generated from the old root certificate (web server certificates, etc.) need to be re-created? Or can I somehow make it so I don't have to renew them?
Thanks!