This article explains how to enable SSL on Tomcat with a public certificate. This prevents the "Safari/Firefox can't verify the identity of the website <jamf.mycompany.com>" dialog box from appearing each time you connect to the secure port of your Jamf Pro instance.
Enable and initialize an empty keystore.
Generate a certificate signing request (CSR).
Import the generated certificate(s) for use in Tomcat.
Modify the server.xml file to use the newly created certificates.
If you have a clustered environment, you must log in to the Jamf Pro web app for each Apache Tomcat node and create or upload any SSL certificates for each node.
If you use a third-party certificate authority (CA), Jamf recommends that you contact your CA for information specific to your certificate before following these instructions.