Is there an API to create certificates so they don't have to be manually installed on multiple machines?

Lloyd L. Chambers said:
Yes, the AMX API supports this. You can use the TrustStoreTrustManager and override shouldAddToTrustStore() to prompt the user to accept (or not) a certificate:

https://glassfish.java.net/nonav/javaee5/amx/javadoc/com/sun/appserv/management/client/TrustStoreTrustManager.html

https://glassfish.java.net/nonav/javaee5/amx/javadoc/index.html

I think admin CLI also offers this capability.