I have been asked this question on a couple of occasions: How do I rotate the expired or nearly expired certificates on my downloadable dev VHD? Here's the LCS blog on the topic , https://blogs.msdn.microsoft.com/lcs/2018/04/24/rotate-the-expired-or-nearly-expired-certificates-on-your-downloadable-vhd/ .