You can change the device certificate renewal frequency from the Settings screen in the Management console. The shorter one is a certificate's lifetime, and the lower one is the chance that it can be used successfully in an attack. The downside to this is that if IdP is configured, the user will have to authenticate more frequently.