Navuserpassword sign on and oneclick no domain

freb

Hi
I am probably missing the obvious but have spent the last week on this.

I am trying to setup Nav 2013r2 on Windows 8 as a server so no domain.

every ting works fine in server.

I am trying to set up one click to use Navuserpassword .It installs on user mc and runs but i am getting a certificate error.

If I install certificate on client PC works fine. but doesn't this defeat the idea of one click.

If i set up Azure using powershell scripts clickonce installs client and works without installing Certificate.
Client config is shown below

<?xml version="1.0" encoding="utf-8"?>
<configuration>
<appSettings>
<add key="Server" value="******-server" />
<add key="ClientServicesPort" value="7066" />
<add key="ServerInstance" value="***navu" />
<add key="TenantId" value="" />
<add key="ClientServicesProtectionLevel" value="EncryptAndSign" />
<add key="UrlHistory" value="dvsmea-server:7066/***navu" />
<add key="ClientServicesCompressionThreshold" value="64" />
<add key="ClientServicesChunkSize" value="28" />
<add key="ClientServicesKeepAliveInterval" value="120" />
<add key="MaxNoOfXMLRecordsToSend" value="5000" />
<add key="MaxImageSize" value="26214400" />
<add key="ClientServicesCredentialType" value="NavUserPassword" />
<add key="ACSUri" value="" />
<add key="AllowNtlm" value="true" />
<add key="ServicePrincipalNameRequired" value="false" />
<add key="ServicesCertificateValidationEnabled" value="true" />
<add key="DnsIdentity" value="NavServiceCert" />
<add key="HelpServer" value="******-server" />
<add key="HelpServerPort" value="49000" />
<add key="ProductName" value="" />
<add key="UnknownSpnHint" value="(net.[url=tcp://******-server:7066/***navu/Service]tcp://******-server:7066/***navu/Service[/url])=NoSpn;" />
</appSettings>
</configuration>


Can anyone help.