Enter the following powershell command. This will place a certificate in the "Personal" store for the Computer. Change the AddYears variable as needed.

New-SelfSignedCertificate –DnsName my.fqdn.com -NotAfter (Get-Date).AddYears(20) -CertStoreLocation "cert:\LocalMachine\My"