The Group Policy scheme is used for domain controllers to automatically request certification from the Certificate Server. Policy setting are updated every 6 hours by default or on reboot, which means this policy is not immediately taken into account.
Open Users and Computers.
Right-click Domain Controllers container, then Properties and Group Policy tab.
Move down to Computer Settings, Windows Settings, Public key policies, Certificate automatic request setting
Right-click
A wizard opens. Choose the Domain controller parameter
Select proper Certification Authority.
Summary.
Terminate. Allow for a group policy update delay of 6 hours or reboot.