The panel uses a certificate from this server's own Certificate Authority. Install the CA certificate once on each office computer; after that the browser shows the padlock (no "Not secure") and offers to save the password.
MI-Link-PTA-CA.crt → Install Certificate…Or in PowerShell as Administrator:
Import-Certificate -FilePath "$env:USERPROFILE\Downloads\MI-Link-PTA-CA.crt" -CertStoreLocation Cert:\LocalMachine\Root
Settings → Privacy & Security → Certificates → View Certificates → Authorities → Import → tick "Trust this CA to identify websites".
SHA-256 fingerprint (compare with sudo openssl x509 -in /etc/ptalog/tls/ca.crt -noout -fingerprint -sha256 on the server):
18:92:36:7F:02:CB:73:DB:F4:70:AB:99:2D:63:24:52:40:E6:1A:1D:EA:CD:29:D2:BA:E7:2D:05:27:93:A0:49
Only install this certificate on your own office computers. Open the panel by the server IP address (e.g. https://10.155.72.29) — the certificate covers the server's IP addresses and host name.