When you receive updated server TLS certificates or intermediate certificates, you import the certificates into the Windows local computer certificate store on each Connection Server, security server, or View Composer host.
Typically, server certificates expire after 12 months. Root and intermediate certificates expire after 5 or 10 years.
For detailed information about importing server and intermediate certificates, see "Configure Horizon Connection Server, Security Server, or View Composer to Use a New TLS Certificate" in the Horizon 7 Installation document.