In your Active Directory, create and configure Windows certificate templates for WSTEP enrollment.

To create and configure a Windows certificate template

1. If not already installed, install the  Certificate Templates snap-in as explained in Installing the default set of Microsoft Certificate Templates using the snap-in.
2. Select the existing certificate template that most closely meets your desired specs.
3. Right-click on the existing template and select Duplicate template.
4. Configure settings in the following tabs in the Properties of the New Template dialog.
   • Compatibility
   • Cryptography
   • Extensions
   • General
   • Issuance requirements
   • Key Attestation
   • Request Handling
   • Security
   • Server
   • Superseded Templates
5. Click OK.