When you do the administration via web page, the signed cert is used. You may need to suppress the warnings when you are using internal CA singed cert.
Either works. Note that you can also to choose using self-signed cert, it is by default when installing Jabber Guest server, and if you changed your hostname of server, you need to generate a new self-signed cert.