The following link is known to work, but is for Linux: http://panoptic.com/wiki/aolserver/How_to_generate_self-signed_SSL_certificates
Can you upload your PEM file per the instructions here: http://kb.vmware.com/kb/1008525 (no need for a SR, just create a folder called imthemp3king)