You must not change security setting options during the peak system usage hours.
Signing: Before changing it, ensure that Identity Server trust store contains the root CA certificate and possible intermediate CA certificates to complete the trust chain.
Trust Store: Before changing it, ensure that you have all the root CA certificates and possible intermediate CA certificates to complete the trust chain to trust any certificates used by Identity Server.