Refine instructions

Author: maxvp

src/content/docs/cloudflare-one/connections/connect-devices/warp/user-side-certificates/index.mdx

@@ -32,7 +32,7 @@ To generate a new Cloudflare root certificate for your Zero Trust organization:
 4. Choose a duration of time before the certificate expires. Cloudflare recommends expiration after five years. Alternatively, choose _Custom_ and enter a custom amount in days.
 5. Select **Generate certificate**.
 
-The certificate will appear in your list of certificates as **Inactive**. To deploy your certificate and turn it on for inspection, you need to [activate the certificate](#activate-a-root-certificate).
+The certificate will appear in your list of certificates as **Inactive**. To download a generated certificate, select it, then choose **Download .pem** and/or **Download .crt**. To deploy your certificate and turn it on for inspection, you need to [activate the certificate](#activate-a-root-certificate).
 
 Each Zero Trust account can generate a new root certificate a maximum of three times per day.
 

src/content/docs/cloudflare-one/connections/connect-devices/warp/user-side-certificates/install-cert-with-warp.mdx

@@ -34,13 +34,15 @@ The certificate is required if you want to [apply HTTP policies to encrypted web
 ## Install the certificate using WARP
 
 1. (Optional) [Upload](/cloudflare-one/connections/connect-devices/warp/user-side-certificates/custom-certificate/) a custom root certificate to Cloudflare.
-2. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Settings** > **WARP client**.
-3. Turn on **Install CA to system certificate store**.
+2. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Settings** > **WARP Client**.
+3. Turn on [**Install CA to system certificate store**](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#install-ca-to-system-certificate-store).
 4. [Install](/cloudflare-one/connections/connect-devices/warp/download-warp/) the WARP client on the device.
 5. [Enroll the device](/cloudflare-one/connections/connect-devices/warp/deployment/manual-deployment/) in your Zero Trust organization.
 
 If a custom certificate is not provided, WARP will install the default [Cloudflare certificate](/cloudflare-one/connections/connect-devices/warp/user-side-certificates/install-cloudflare-cert/#download-the-cloudflare-root-certificate) in the system keychain for all users. If you uploaded a custom certificate, the WARP client will deploy your custom certificate instead of the Cloudflare certificate.
 
+WARP will only install the [certificate set to **In-Use**](/cloudflare-one/connections/connect-devices/warp/user-side-certificates/#certificate-status). If you turn on a new certificate for inspection, WARP will automatically install that certificate to your users' devices.
+
 Next, [verify](#access-the-installed-certificate) that the certificate was successfully installed.
 
 :::note[Important]

src/content/docs/cloudflare-one/connections/connect-devices/warp/user-side-certificates/install-cloudflare-cert.mdx

@@ -29,7 +29,7 @@ First, [generate](/cloudflare-one/connections/connect-devices/warp/user-side-cer
 1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Settings** > **Resources**.
 2. In **Certificates**, select **Manage**.
 3. Select the certificate you want to download.
-4. Depending on which format you want, select **Download .pem** and/or **Download .crt**.
+4. Depending on which format you want, choose **Download .pem** and/or **Download .crt**.
 
 ### Verify the downloaded certificate