Hi Do we have an answer for this?   Regards

After a few thoughts and tries, I think my question was not really understandable. In this scenario, i think the renouncement is also done by CWA !?

And with this setup (single SSID): when the certificate is expired, does the user simply enter the NSP process to reinstall a valid certificate ? therefore, no CWA with single SSID ?    

no other way to renew without redoing the onbooarding process?no difference in dual or single SSID?

Is there an update on this issue? Is the only way to renew a BYOD certificate is through CWA?   Thanks