Inf file must be set up on a number server before the setup plan for the root CA begins. When the security restrictions on the root CA are to generally be modified, the root certificate should be renewed and an updated CAPolicy.inf file needs to be installed over the server https://vsolvereg.com/replacement_documents.php