If you are using AGAT certificate, you will get it from AGAT support before expiration of current certificate.
Please copy this certificate to X:\Agat\Bastion\Cert and rename the old certificate to <certname>.old
You need to install the new certificate on "Local Machine"
Click Next and provide the password from Bastion.xml
Place the certificate on "Personal"
"Next" and "Finish"
Y