The certificate is distributed to ALL clients, but do you have to copy a new certificate EVERY time the grc.dat file is copied?

PS. All (190 clients are Managed)