Ensure that you have completed the following activities in your back-end directory:
Install certificate services
Export self-signed certificate for the directory
Add self-signed certificate to GPO
Create recommended users and groups for SSPR usage
For more information about how to perform these activities, see the related product documentation.