I'm going through the steps here to set up hybrid server side sync on an on-prem crm to O365 exchange
https://technet.microsoft.com/en-us/library/mt703269.aspx
One of the first couple steps is to run the command for CertificateReconfiguration.ps1
Reading through the powershell script, from what I gather it seems to just give this service account user used in the app pool for IIS access to the local cert keys. My question is
Is this step even needed if the cert is already working and IFD is configured, and the service account that will be used is a local admin on the IIS app CRM server (everything except adfs is running on this local server)
Second question - Will this need to be rerun for when the certificate renews?
