Rancher installation guide says

If you are using a private CA, Rancher requires a copy of the private CA's root certificate or certificate chain, which the Rancher Agent uses to validate the connection to the server.

I wonder to know If I use a self-signed cert which involves no CA. what should I do to make Rancher Agent to validate the server