Perhaps you could distribute an Electron style client that has a self-signed certificate pre-configured and ask your clients to interface with the equipment via that?

If you were using Electron you wouldn't have to worry about browser support either as you'd just have to target Chrome/Blink.

Just brainstorming ideas here, someone will probably shoot me down.