You are deploying a CA-signed TLS certificate to a network automation web service that presents its API over HTTPS. The public CA issued you a device certificate signed by an intermediate CA, which in turn is signed by the root CA. After installing only the device certificate, some clients report 'unable to get local issuer certificate' errors while others connect fine. What is the correct action to resolve this for all clients?