Create a certificate template
-
Press
Win+Rand run thecerttmpl.msccommand. -
Right-click on Kerberos Authentication template and select Duplicate Template.
Duplicate template
Duplicate template -
The properties of new template appear. Go to the General tab, rename the template display name, and enable the Publish certificate in Active Directory option.
Properties of New Template
Properties of New Template -
Go to the Request Handling tab and enable the Allow private key to be exported option.
Allow private key export
Allow private key export -
Go to the Subject Name tab and select Supply in the request.
Supply subject name
Supply subject name -
Click Apply and then click OK.