1. Just get your root certificate installed on the device so that it is seen in the certificate store (server sertificate!), lot of instructions to do that on this forum..