Replacing machine certificates