Force the people and then give them simple instructions to install certificate. And it's done.

Forcing is as easy, as blocking access to important services behind the certificate wall.