Prerequisite:
You should have the certificate (.pfx).
For Workspot Daas certificate: Needs the daas20 certificate.
For Customer-owned Certificates: Needs their certificates.
You need the certificate password.
Make sure the Gateway is in maintenance and has 0 connections.
Steps to upgrade the certificate manually:
Log in to the Gateway through CyberArk and copy the files into the Gateway server.
Open the Remote Desktop Gateway Manager from the Gateway.

Right-click on the Gateway server and click on properties.

Click on the SSL Certificate tab and select the “Import a certificate into the RD Gateway “Gateway_name” Certificates (Local Computer)/Personal store” option.

And Select the Browse and Import Certificate…

Upload the certificate from the Gateway (Which you copied earlier point no. 3). Then it will prompt you to enter the Private Key Password, enter the password .

Click on Apply and Okay to Finish it. You can see the new certification Expiration date below:

You can also verify it in the Watch, it may take a couple of minutes to replicate the changes. You can restart the Workspot Gateway Agent service to replicate it immediately.

Note: Make sure to delete the certificate and password, in case you saved in the gateway or any other location.