Big IQ Cert Renewal: Unmanaged LTM and Certs

Hello,

We have recently installed/configured Big IQ in our environment and have imported our LTMs but they are still unmanaged. We have a SSL certificate that needs to be renewed and I am not sure the best practice for that. I am new to Big IQ so want to know, should I:

1.renew the cert directly only the LTM and then rediscover/reimport that LTM?

a. is the rediscover/reimport needed?

2. import the SSL cert into Big IQ and then deploy down to the LTM (even though the LTM is unmanaged)?

b. how is this done if this is the better option?

Thanks in advance!

Diane