This is the way @Aaron_Pang. I have installed and ran a large instance for the whole company using only an internal DNS hostname and certificates from our internal PKI, and it works very well. In my case the server didn’t even had access to the internet.