Professor Robert McMillen shows you how to create a self signed cert using Powershell in Windows Server 2016
New-SelfSignedCertificate -certstorelocation cert:\localmachine\my -dnsname "cert1"
$pwd = ConvertTo-SecureString -String "Passw0rd" -Force -AsPlainText
To have it trusted internally watch this video to link in a group policy object: [ Ссылка ]
Ещё видео!