I've seen several posts online about how to generate a self signed certificate for NAV but is that the best way to go in a production environment? I've noticed the Web URL could be used for a few different purposes: 1. Web Client, 2. Syncing with O365, 3. Mobile Apps.
My initial plan was to set up Certificate Authority on Windows Server 2016 and generate a certificate that way. I would then distributed it through group policy and mdm. I'm thinking of keeping the web client behind a VPN.
Here are my questions:
1. Will the mobile apps work behind a VPN with a self signed certificate and without a public FQDN?
2. Is there any reason to have a public domain and real certificate?
3. What are the advantages to generating a cert with my CA over using powershell as seen in the examples online?
*This post is locked for comments