...
Certificate rotation limits the potential exposure in a case where a remote agent certificate has been compromised. It does, however, also expose the possibility of an unexpected loss of communications if the certificate rotation handshake fails. For this reason, we have added a recovery path in order to recover from a failed certificate rotation. This functionality, called “break glass'glass”, allows the one-time replacement of the gateway-stored remote agent certificate.
In order to initiate the break glass mode, right click on the remote agent and select the “Certification “Certificate Rotation Break Glass” option. Note that you must have the “Manage Certificates“ permission (otherwise the menu item will be disabled).
...