On-demand VPN, iOS, internal website certs

[The-messenger]

Configuring F5 Access, via Intune to access internal sites via VPN. All working well but I get ssl cert errors for internal sites. Might be more of an Intune question, but I need to get the internal CA root in the device cert store for trust.

How can this be done.