Hi Andreas,
You were right that this is answerable on our side, and the answer is no: the Agent did not supply it.
The Agent builds that command line itself, and it is the same line at the version you report and in today's source: the MSI path, quiet mode, a log path, and at most one property - the one restoring the service start mode, added only when the service was set to start automatically. Nothing else is appended in either. The switch that enables the configuration step is not among them, it defaults to false, and every installer action that writes certificate settings or touches the private key requires it to be true. Whichever build ran the upgrade, none of them supplies it, so all of those actions were inert.
Nor could Devolutions Server have supplied it through the Agent: what the server sends for an update is a single field, the target version, and that contract has no room for a property.
If you would rather check than take my word, the Agent installs with a verbose MSI log, written beside the downloaded package in the service account's temp folder. It is deleted at the next reboot, so it is likely gone; if that host has not restarted since, the command line is on its first page.
So the installer theory is finished, and it was the last one this thread had. I would rather say that than reach for a replacement: I have no explanation for the original failure at the moment. What is left is a reproduction in a lab on our side, and I am not going to tell you it is scheduled.
On the other environments you are right on all three points. hjbos reported the error after upgrading Devolutions Server, while the Gateway was still on the old build; the evidence that his certificate is sound is a browser health page, the exact check I later told you not to rely on; and my two explanations cannot both be the general one. hjbos was moved to a support case, and the log check you posted is the right first step for his environment and for kts's.
The crash fix is still closed against a build that has not been released I checked again today.
Best regards,
Michel