Does the RHEL SCCM client certificate that is installed for client authentication get automatically renewed by the client/server when it nears expiration or does someone have to manually update it using he certutil tool on the RHEL platform? TechNet documentation talks only about initial installation of the certificate and then using the certutil tool to manage certificate thereafter, it does not discuss renewal in the certificate management section.
We are trying to understand whether client certificate management of our SCCM clients requires operator interaction and out of band certificate provisioning or whether the client software itself (in coordination with the server and NDES) will take care of this.