When the root certificate on the EPM expires, you need to generate a new certificate by using the UpdateRootCertificate.sh script.