Hi @SurajN ,
You must renew it before it expires. If expires and if you use default configuration (deny users to connect to GP portal with invalid certificate), none of your users will be able to connect to GlobalProtect.
So you must renew it before cert end date. You can renew it when ever you want (one, two, three months before that), as long as you do it before it actually expires
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!