ClouderaManagers Auto TLS certificate expiry

[#1]

Hi Cloudera, 

I am little bit confused, I was not able to clearly find out whether the Auto TLS feature extendes the certificates automatically before they expiry, or the administrator has to check the validity and do some manual steps (is it Rotating?)

Also the docs says here that the auto-tls is not possible on the existing clusters, but here is that it is possible from 6.2

https://www.cloudera.com/documentation/enterprise/latest/topics/how_to_configure_cm_tls.html

https://www.cloudera.com/documentation/enterprise/latest/topics/auto_tls.html#rotate_auto-tls

So my question is, what is the steps required to renew the certificates in CDH 5.15 (CM 5.15) cluster which was deployed using Auto-TLS?

Thanks

[#2]

Are you using Director to deploy cloudera manager with auto-tls?