Some certs that are generated can be replaced can the On Prem tenant CA/IWA root certificate be replaced?
Question: Can the Tenant CA/IWA root certificate that is generated during the on premise PAS installation be replaced?
Answer: Unfortunately while it is possible to replace the other certs that are generated at install time, there is no way to replace the tenant CA/IWA root cert. This cert gets used to generate a number of things internal to the tenant that make replacing it problematic.