Yes for both the questions Manoj, if the environment is isolated I will leave it manual enrollment but keep a reminder to renew my certificates just before the expiry.
Goodluck and hope it helps.
==
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please don't forget to upvote and Accept as answer if the reply is helpful