1.  Click Start
  2. Type in MMC and hit enter

  4. Click File | Add/Remove Snap-in...

  6. Click Certificates in the Available snap-ins pane and click the Add button.

  8. Choose My user account then click Finish

  10. Click OK
  11. Expand Personal | Certificates
  12. Right-click Certificates, choose All Tasks | Request New Certificate

  14. Click Next at the Before You Begin screen
  15. Select Active Directory Enrollment Policy then Next
  16. Check the Custom User Certificate check box then click Enroll
  17. At the Certificate Installation Results screen, click Finish