generating a self signed cert

• openssl genrsa -des3 -out mykeyname.key 1024
• openssl req -new -key mykeyname.key -out mykeyname.csr
• openssl x509 -req -days 365 -in mykeyname.csr -signkey mykeyname.key -out mykeyname.cer
• openssl pkcs12 -export -in mykeyname.cer -inkey mykeyname.key -out mykeyname.p12 -name mykeyname -CAfile mykeyname.cer -caname mykeyname -chain

The certificate (mykeyname.cer) was added into the Trusted Root Certification Authorities in the default domain policy. (Default Domain Policy -> Computer Configuration -> Windows Settings -> Public Key Policies -> Trusted Root Certification Authorities)