Configure Communication Manager to trust a third party root CA.
When you replace the SIP CA with the third party certificate, all Communication Manager TLS connections will go down.
Perform this procedure for each Communication Manager that is connected to the Session Manager.