Upgrade SP with intermediate certificate

[Cantor, Scott]

> I am trying to upgrade the browser-facing certificate on the Service Provider
> (sp).

That has no connection to the SP.

> Then I have updated shibboleth2.xml (after notifying all the stakeholders
> about the change) to point to the new certificate:

No, stop, undo, never. Is that clear enough? Do NOT do this.

> However I have couple of questions how to update the sp-metadata.xml
> with the new certificate:

You don't.

-- Scott