Setting up a self certificate is problematic because Windows has changed how the certificates are stored, and the default is not the right place - see the web page I posted for details on how to put it right.