I had to in my case, because my original keystore password used in WFS 1.0 has special characters that causes issue with aab generated by WFS 1.2. Google doesn’t accept it stating aab is not signed. So I can’t update the watch face without a new keystore, Google Console is helping me to reset the certificate.