You will need to create a Certificate Signing Request (CSR) and submit that to a Certificate Authority (CA). If you want the certificate to be valid outside your own network, you will need to get a certificate from a Trusted Root Authority, an inexpensive one is RapidSSL. You can get instructions for how to create a CSR and later install the cert from:
https://www.rapidssl.com/ssl-certificate-support/ssl-support.htmOnce the certificate has been installed then the button should highlight and you can enable SSL.