I developed an application that uses Java Webstart. It needs write access to the disk so it has to be signed, but it would only be used by a limited group of users so I don\
I was developing Java Web Start app years ago with NetBeans. It did everything for me automatically. You just have to put permissions tags in JNLP file. Also 6 month after I had problems to create a new self-signed certificate. But self signed app still works. (many years after, no modification, certs to install) Clients do not have to install any certificates. It just warns everytime when it starts that is signed with self signed cert.