2. Enroll A New Certificate

After the certificate has been requested, you must enroll the users.

  1. In the left pane of the certmgr window, right-click Certificates and select All Tasks > Advanced Operations > Enroll on Behalf of.
  2. Read the Before You Begin reminder and click Next.
  3. Select the certificate enrollment policy and click Next.
  4. In the Select Enrollment Agent Certificate window, click Browse and select a certificate.
  5. In the Certificate Enrollment window, select Smartcard User, expand the details, and click Properties.
  6. In the Certificate Properties dialog box, under Cryptographic Service Provider, select corresponding cryptographic service provider for your smart card. E.g., if you are using Gemalto card, select Microsoft Base Smart Card Crypto Provider (Encryption) . Click OK.
  7. Click Next.
  8. In the Select a User dialog box, enter the user name and domain, click OK and then click Enroll.
  9. When prompted, type your PIN and click OK.
  10. Review the results and click Close.