Once upon a time, we could manually run a PKI Health Check without bringing any services down. And the docs I can find still allude to that distant past.
Especially KB 7000654
When iManager doesn't want to talk cleanly with a system, it would be nice to have other tools available to check things, or even have the confidence that those PKI Health Check processes can still run before relying on a reboot to fix an expired cert.
Hopefully it would also give a clue that the Server Self-Provisioning is active, especially given that the docs don't tell us how soon it becomes effective after being configured.
Andy of KonecnyConsulting.ca in Toronto
Please use the "Like" and/or "Verified Answers" as appropriate as that helps us all.