@TonyR - thanks the the welcome and link.
Unfortunately, the link doesn't show a way to install a cert, just create one on the NVR and download the root. Interestingly, though, on Dahua cameras it looks like it is easy - I haven't tried yet, but the dialog is there to upload a certificate and...