Will updating the Identity certificate for an IOS XE switch or router

[Dakenrick]

Will updating the Identity certificate for an IOS XE switch or router cause traffic loss for GETVPN? 

I am updating the certificates for ISAKMP policy authentication to a cert signed by New Certificate Authority (CA) intermediate server. It will have be signed by the same Root CA of the Identity certificate that is currently in place now for GETVPN ISAKMP policy.

[Rob Ingram]

@Dakenrick the certificate is used for authentication when establishing the inital establishment of the tunnel, so you should be fine to renew without causing traffic loss.

[balaji.bandi]

i do not see any issue, but if you are cautious let other side engineer available for help