The Rollover Service allows you to activate rollover certificates automatically once they become valid. For more information on rollover certificates, see Managing CAs.
If you want to renew a CA prior to the existing CA certificate expiring, the updated certificate can be installed on the CA and will then be automatically activated by the Rollover Service as soon as its notBefore time becomes active.
