If the certificate of your airgap server is expired, you need to update the airgap server with a new certificate suite. All the exsiting TCA clusters associated with this airgap server are required to be updated in case the new certificate is self-signed or private CA signed.
An existing airgap server is deployed for serving the TCA system.