See below for adding and managing the Microsoft certificate templates in Active Directory for WSTEP enrollment and autoenrollment.