This might save you a couple of stressful hours
FMS 16 on WS 2016:
When requesting the certificate from GD select "Other" as the web server type, NOT "IIS"
After installing, stop and restart the FMS Service from the Windows Services panel. Don't rely on simply stopping the server using the FMS Admin tool.