Renewing certs on Smart Cards in AD environment?

[obi-k]

Hi,

After deploying your smart cards, how are you renewing the certs on them? We are in an AD environment, using the Attribute Mapping .plist in Catalina.

I thought the certs on the smart cards would get auto-renewed from the CA Server. But in testing, the cert gets applied to the Keychain and not the smart card.

Any help would be great!