Currently our JSS is setup with the FQDN of the server hosting it, IE: loc-jss01.ad.example.edu. The server is also setup with a signed SSL certificate at that address. In preparation of setting up a limited JSS in the DMZ to point all clients at, I want to add an ARECORD for the server and change the mapping of all clients to that ARECORD(jss.example.edu). I'll also need to generate and assign a new SSL cert to the server. What would be the best way of pointing all the currently managed clients to the new ARECORD from the FQDN, changing the JSS address in server settings to the new address, and swapping out the cert on the server without breaking client management.
