Create a certificate template
-
Press
Win+R
and run thecerttmpl.msc
command. -
Right-click on Kerberos Authentication template and select Duplicate Template.
Duplicate templateDuplicate template -
The properties of new template appear. Go to the General tab, rename the template display name, and enable the Publish certificate in Active Directory option.
Properties of New TemplateProperties of New Template -
Go to the Request Handling tab and enable the Allow private key to be exported option.
Allow private key exportAllow private key export -
Go to the Subject Name tab and select Supply in the request.
Supply subject nameSupply subject name -
Click Apply and then click OK.