...
Launch the Enterprise PKI snap-in console.
Right Click on EnterprisePKI and select Manage AD Containers...
Add the new CA that was created.
Click Ok and then click on the CA entry that appears under Enterprise PKI...
If you see all of the following 4 certificates and their status is OK, then your domain is ready for DualShield Computer Logon Passwordless Authentication.
...