Imagine having a couple of hundred of embedded devices in the field that need to be remotely managed over SSH or HTTPS.
These embedded devices are exposed on the internet but are installed at secure locations. They are put in an enclosure that cannot be accessed by unauthorised personnel.
The people that require remote access to these devices are limited, and are dedicated support personel.
What is the risk of using self-signed certificates in this case ? Providing we
clearly communicate to the people that need to access these systems that these are indeed self-signed server certificates.
we install the root CA certificate on the clients