Ideally, the Root and intermediate certificates should get automatically updated from Symantec / internet similar to all End points (Desktops / Laptops) where as SMG is not getting updated automatically.
Due to this, we have faced issue with email not getting delivered since our SMG was not having latest Root and intermediate certificate. With great difficulties, we got both root and intermediate certificate from our client to resolve this issue.
Suggetion: We don’t want this issue to re-occur thus we need an automated approach where our SMG get these certificates (Root and Intermediate of All CA) updated automatically