Obtain an SSL Certificate from a trusted authority such as VeriSign, Equifax, etc..

OR

Install a Microsoft Enterprise certification authority in the Active Directory forest. You can use this certification authority to generate a certificate for each Web server.