Actually you only need to install the root CA certificate on the non-domain joined machined so that they trust the certificate on the RDP server. You can do that pretty easily via PowerShell.

Websites use encryption certificates to protect your privacy and security when you visit them. The certificates work by encrypting data sent between your computer and the site. If a site has an ...