When connecting a managed networked device (printer, router/switch, PC based software service) to a domain, mostly these days it has a https management or user access web portal. When viewing these web pages from a browser it will complain about the device not having a trusted certificate - usually because it is self-signed (by itself).
What is the best protocol for removing this warning for an internal staff accessed situation?
- Tell the users to add the certificate permanently to there local browser store.
- Replace the certificate on the device with a self signed certificate issued by the domain controller - (which presumably the domain users computers will accept due to chain of trust?)
- Add the device's self-signed certificate to the domain controller store - (which again presumably the domain users computers will accept? )