hi,
Server side : Don't forget to activate deploy and download on your server configuration !
Client side : Use Ocspackager and build a installation package for agent with your parameters except this two : /server=https://yourserver:443/inventory/ /ssl=1
Include the new certificat, use correct administrator credential, finish building.Deploy the fresh ocspackage.exe on client with GPO or script.
Nothing append to client when you install and configure sll on server : invetory use http, and deployement use only https
Regards
EDIT : Modified, thank to franck