self signed cert on board has to be imported so you dont get the anoying cert warning, when you generate ca you will import ca once and all your services with generated cert from ca will be valid