A while back, we've created a GPO that deploys certificates to machines so they can be used over Remote Desktop Services (RDS) - a model of the guide can be found here. Everything went smooth and the machines automatically enrolled for the correct certificate type and had this assigned to corresponding connection inside the RDS Session Host Configuration. Now that the former certificates are expiring, we're seeing an issue whereas a new certificate is successfully issued for the machines, but it's not selected in the RDS Session Host Configuration.
What would be the extra step required to complete the process ?