You can only renew DigiCert certificates that use a SCEP payload in their configuration profile. DigiCert certificates that use the Certificate payload in their configuration profile cannot be renewed.

1. Log in to Jamf Pro.

2. In the top-right corner of the page, click Settings .

3. Click Global Management.

4. Click PKI Certificates .

5. In the row for the DigiCert certificates, click the number in the Expiring, Active, Inactive, or All column to view a list of the certificates.

6. Click the certificate in the Certificate Subject column you want to renew.

7. At the bottom of the page, click the configuration profile that is associated with the certificate.

8. Click the SCEP payload.

9. Click Edit .

10. In the Redistribute Profile field, click the pop-up menu, and then select the number of days before the SCEP-issued certificate expiration date that you want the configuration profile to be r edistributed automatically. Configuring this option adds “$PROFILE_IDENTIFIER” to the Subject field.

11. Click Save .