In macOS, you can get and renew your certificate with the same profile. MacOS alerts you as a certificate nears its expiration date:. When a certificate is 15 days from its expiration date, you get a reminder. When a certificate is less than 15 days from its expiration date, a banner appears in Notification Center. This notification repeats once a day until the certificate expires or you update or remove it. To update a certificate, in the Profiles pane of System Preferences, click the certificate profile, then click Update. Yosemite and later versions of macOS display a daily notification when the certificate has less than 14 days until it expires.
The profile you used to create the ADCert or SCEP certificate might be removed. If you use Mavericks or a later version of macOS, the most recent certificate and private key are removed from the keychain, but the original certificate isn’t. You have to delete it.
The profile you used to get the certificate might have other payloads linked to the certificate. Examples of payloads include Network: EAP-TLS, VPN: OnDemand certificate-based authentication. When the certificate is renewed, the dependent configurations are updated for the new certificate. After a certificate is renewed, the installed profile is associated with the new certificate.
When a certificate is renewed, no additional profiles are installed or created. Information about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Risks are inherent in the use of the Internet. For additional information. Other company and product names may be trademarks of their respective owners.