You can download the PAC file from the HTTPS web console's path without doing anything:
For example:
[https://\{iwsva_hostname}:8443/pac_files/proxy.pac|https://iwsva65sp1:8443/pac_files/proxy.pac]
Take note that the IWSVA console certificate should be trusted by the client browser:
- Certificate CN/SAN same with IWSVA Hostname
- Issuer certificate trusted by browser's CA store