Windows CA – How to Create a Device Certificate
On your server with the Certificate Authority installed, run certsrv.msc.
The Certificate Templates Console opens.
Click Ok when done.
Now the Template will not show immediately in the Certsrv. To make it show up, first Right-Click the server name in Certsrv, and click Stop Service. Once stopped, Right-Click the server name again and click Start Service.
Expand Certificates. Right-click Personal. Click Request New Certificate. Click Next Twice, so you are at the screen to select the Cert Template to request the cert for. Check the one with the name you selected from the prior step, and Click Enroll.