Setting Up a Domain Certificate for Configuration Manager in IIS with PKI Infrastructure. You may use this manual for creating a Configuration Manager certificate if you have PKI infrastructure (Active Directory Certification Services server role is deployed in your company domain).
1. Log into the server with “Internet Information Services” (IIS) (domain-joined PC). Click the “Start” button and find in the apps list “Internet Information Services” (IIS);

2. Select your server and go to “Server Certificates”;
I do the next actions on another Server with IIS Console.
3. Clique em “Create Domain Certificate““;
4. Fill in the fields (you must fill in all fields). Common name – enter your destination server FQDN. Clique no “Próximo" botão;
5. Clique no “Selecione” button to select your Central Certification Server;
6. Selecione Certification Server and click the “OK” button;
7. Enter the “Friendly name” (FQDN) of your server (for which you make a certificate) and click the “Finish” button;
8. All good, we can export this certificate and use it as we wish, as it Domain Trusted Certificado;