It depends on a various factors. When you renew CA certificate you will be asked whether you want to generate a new key pair, or use existing. Also there is information about scenarios when you need to renew with existing key pair:
1) CA keys are compromised
2) you want to reduce CRL size
3) you want to use different keys (for example, increase or reduce key length).
yes, since you are using Offline Policy CA, you will have to manually submit renewal request (which is generated in system drive root by default) and install issued certificate by using MMC snap-in or 'certutil -installcert' command.My weblog:
http://en-us.sysadmins.lvPowerShell PKI Module:
http://pspki.codeplex.comWindows PKI reference:
on TechNet wiki
There is an amazing pack of free network admin tools.
click here to download it