Best advice on how to secure Bitwarden Server?

You should be able to use the browser on the device and download the cert through that. There is usually a process that you then have to go through to have it trusted. Another common method is to use an MDM solution.