In a dual-region environment, after you replace the certificates in Region A, you continue with the certificate replacement on the SDDC components in Region B.