Domain users to enrol their own smart cards/tokens

Can anyone point me to a good you tube video or website to help me do the following : Activate Directory Certificate Services is configured to allow domain users to enrol their own smart cards/tokens via the Certificate Manager (certmgr.msc).

I have configured the certificate authority with the templates etc
and added roles for the server using server 2016

thanks in advance for any help you can give me.
phil

Hate to bump the message but I’m keen to get this complete before other projects pop up.