Request Handling:

Set the Purpose to Signature and smartcard logon and select Yes when prompted to change the certificate purpose
Select the Renew with same key check box
Select Prompt the user during enrollment

Cryptography:

Security:

Add the security group that you want to give Enroll access to. For example, if you want to give access to all users, select the Authenticated users group, and then select Enroll permissions for them.

Select OK to finalize your changes and create the new template. Your new template should now appear in the list of Certificate Templates

Close the Certificate Templates console

RDP Certificates for Windows Hello for Business