Step-by-step: Deploying the root certificate for SSL inspection on company iPhones.

Hi everyone. I'm trying to set up Cloudflare One for our small team, and my first task is to get SSL inspection working on our company-managed iPhones. I need to deploy the root certificate for the Gateway proxy.

I've read the docs, but I'm a bit lost on the exact steps for iOS devices. Specifically:
- Do I generate the cert from the Zero Trust dashboard or use my own CA?
- What's the best way to push it to iPhones? Using an MDM like Intune?
- After pushing, are there any extra steps users need to do on their phones, or does it just work?

I'm worried about getting this wrong and breaking internet access for everyone 😅. Any advice from someone who's done this before would be super helpful. Thanks!