Replacement of Certificates / Enable Advanced Security issue with procedure

[karsayor 8]

Hello

I followed procedure Advanced security | ESET PROTECT | ESET Online Help to enable Advanced Security. I have an issue with the step 8 below because if I exchange the certificate with the new one and also do the point 9, clients that were not connected between steps 6 and 8 will no longer connect because they cannot validate certificate chain (as they did not yet download the NEW CA and immediately changed the agent certificate)

I hope I am clear enough ? Am I doing something wrong or is the documentation missing a point that Agents must connect to server before replacing agent and server certs ?