Currently installing roaming clients is a 2 step process because the Root CA has to be installed separately. Especially with the upcoming URL filtering which also requires the cert, it would be nice if the roaming client would install and keep the DNSfilter Root CA up to date.