Solace Broker - Renew Message VPN Replication certificate

akiralt

We have 2 clusters (cluster PRD + cluster DR).

When renewing replication certificate do we apply the new certificates only on the broker where the VPNs are active?
Kind of confusing when I need to apply new certificates on both nodes (4 brokers) and when only those where VPNs are active.

Regards