Does NDES service support shadow certificate renewal via SCEP ?

Question

I have a Standalone CA Server configured with NDES role service to support SCEP.

Certificate enrollment from Cisco routers work fine with SCEP.

Cisco is using a process named shadow renewal tied to CA cert rollover :

Rollover is a special case where the CA certificate expires and a new CA certificate is generated. The CA generates a new CA certificate which becomes valid once the current CA certificate expires. The CA usually generates this "Shadow CA" certificate some time prior to rollover time, because it is needed in order to generate "Shadow ID" certificates for the clients.

When the SCEP client's ID certificate approaches expiration, the SCEP client queries the CA for the "Shadow CA" Certificate. This is done with the GetNextCACert operation as shown here:

GET /cgi-bin/pkiclient.exe?operation=GetNextCACert

It looks to me that this is not supported by the CA server or it is not configured properly to support this, because I get the below message on the router :

Checking Win32 API doumentation, scpecifically the ICertRequest interface definition the GetNextCACert member is not documented, while it is specified in SCEP RFC chapter 5.5.3 "Get Next Certificate Authority Certificate"

Dear Microsoft, is this call supported by NDES or not at the end ? If yes, what configuration is required for this operation at NDES side ?