the SSL certificate cannot be self signed but need to be provided from a public CA like Go Daddy or Verisign (or others) or you can create your own private certificate authority and issue your own certificate.
In IIS 7.5 there is an option to create self signed certificate without having the need of a CA: this kind of certificates are not going to work.
For the APNS: you can obtain one from Apple directly (there is a cost associated to it) but you can even obtain an APNS certificate for free through us: the procedure is explained on the guide: http://help.landesk.com/Product/Index/ENU/MOBL/9.0/home.html
I've used Ceretificate Services on my internal core and issued the cert form there and it works. You do also need to import the root CA from the core onto the MDM though.