This KB article describes the process of adding a SSL Certificate on the Capture Client and pushing the certificate onto a particular Client Policy.
Capture Client has the option to add a SSL Certificates and Enforce that certificate onto the Client Policy.
You can Add a Sonicwall DPI-SSL Certificate/Your own CA Certiticate Manually.
Steps to Add a Certificate Manually:

Note: If the groups are inheriting from Tenant OR Tenant inheriting from Account from then we must add the certificate at the Tenant/Account Scope
Navigate to Policies > Trusted Certificates.

Click on the Upload Certificates options under Enforced Certificates a new window will open.

Browse to the location where the certificate is stored by using Choose File and click on Upload when selection is completed.

Under the Trusted Certificates > Enforced Certificates, the added certificate should appear.

Check the Endpoint GUI and you would see the new certificate that was applied to the Client policy.

If you still see the old certificate, update the policy by right clicking the Capture Client icon on the system tray and then select Update Policy.
