How is APM variable "xml_broker_virtual__cert" updated?

How are the APM variables "xml_broker_virtual__cert" and "xml_broker_virtual__key" updated, preferably via the Configuration Utility?

 

We are renewing an SSL certificate, and have found that the old cert and key are referenced by these variables in the configuration file.

 

How do these variables configuration get updated normally?