Steps to update the expiring IDP certificate

Please illustrate all the steps involved to update the expiring IDP certificate through CA SIngle SIgn On Admin UI.

Please suggest if generating a CSR through Admin UI and requesting for certificate renewal and then finally updating the certificate through Admin UI will help us solve this issue ? Please suggest the steps for it. Also is there any way to generate the key with the CSR through Admin UI?

Are there any other steps involved ?

Also please suggest do we need to manually update the IDP certificate details at the SP side.

Thanks.