The system administrator can replace a self-signed certificate with another self-signed certificate or a certificate from a certificate authority after the installation is complete. Certificate updates are required when the certificate type changes or the certificate expires.