The token-signing certificate that you selected will be updated after you click Yes. As a result of this change, a new verification ...

The token-signing certificate that you selected will be updated after you click Yes. As a result of this change, a new verification certificate will be added to the trust policy. This new verification certificate will then be propagated within 60 minutes to all AD FS-enabled Web servers that may be associated with this Federation Service. Until this propagation has been completed, AD FS will not be operational. To minimize the amount of down time that may occur, based on this change, you may want to consider restarting IIS on each of your AD FS-enabled Web servers to force an immediate propagation of the verification certificates. Do you still want to select this new token-signing certificate?