process to generate a new RSA Connection key.

The process I have to create a new RSA connection key (current key is about
to expire)
is to first save "id_rsa" and "id_rsa.pub" with a yyyy extension.
then "ssh-keygen –t rsa –N “” "
then rename the new id_rsa, id_rsa.pub files with new expire year (2 years)
then rename the first files back.
the next process is to send the new id_rsa.pub file to our bank for
"testing and approval".
when approved, we can set the new files to "active" (drop the year
extension).
and send the new public key to the other vendors we connect to via ssh.

we only use one ibm i user profile for all of our ssh communications.

I don't think this is how it is supposed to work, but I can't find good
instructions on "renewing" a RSA connection key.