- install root CA SSL certificate instead of boot server certificate