Sync Tool - Generating the Certificate
At the SQL Server, open the Certificates via the Microsoft Management Console (MMC) and select Local Computer.
Right Click Personal and select Request New Certificate.
Select Computer for the Active Directory Enrolment Policy.
Click Details and select Properties.
(Optional) Give the certificate a suitable name.
Under the Subject tab, specify a Common Name (CN) as the fully qualified domain name of the SQL Server machine (e.g servername.domainname.local).
Enroll the certificate and click Finish.
Right click the certificate, under All Tasks select Manage Private Keys.
Add the SQL Server service account.