Following are the steps to set up Active Directory certificate auto-enrollment:

1. Create a certificate request configuration to define CA certificate autoenrollment settings.
2. Enroll the certificate by using the Security Configuration Wizard.
3. Configure Group Policy to enable Autoenrollment.
4. Manage Certificate Enrollment Policy objects (CEPOs).
5. Set the authentication methods for users.
6. Enroll the users or computers.