User certificates marked as insecure

We obtain user certificates via the German Research Network (DFN) for the electronic signing of documents. However, this signature is marked as insecure. Each user could now perform a manual import of the root certificate on his local PC, but we want to avoid this. Is there a way to import the root certificate globally on all PCs?