Background
HYPR Workforce Access Client for Windows uses AD CS certificates to process authentication requests. Certificates are being issued during the mobile device or security key enrollment. The key's validity period is defined in the AD CS certificate template.
Certificate Renewal Process
HYPR Workforce Access Client for Windows can automatically renew mobile device authentication certificates before the expiration date. The workstation client checks for the certificate validity period and will attempt to renew the certificate 30 days before the expiration date.
Suppose the user is connected to the secure company network that allows them to communicate with AD CS to request a new certificate. Everything will be handled in the background without the user even noticing this.
When the secure connection with AD CS can't be established, users will see an alert displayed on Windows asking users to connect to the VPN to continue using the HYPR Mobile App to log in.