Question:Is the warning to generate new security keys related to the Server certificate used for storefront base URL?
Answer: No, this warning is not related to the server certificate used for storefront base URL.
This indicates that the Self-Signed certificates generated by storefront are expired and they needs to be renewed. You can see the certificates from within the Certificate Management Console under the Citrix Delivery Services node.
Note: Make sure to add Computer Account Certificates snap-in to see the Certificates stored in the local computer.
There would be various self-signed certificates which are generated automatically while configuring storefront.
These certificates do not cause any issue, if expired. However to renew them we need to generate new security keys, and when you generate new security keys, any users who are currently logged on will need to re-authenticate to their stores. As a result, this task is best carried out during periods of low user activity.