Almost there...
Now the setup is complete, however to use the AirID VIRTUAL smartcard logon we need to Publish the issuing CA in our domain
<Screenshot Button>
For this we simply click the button "Download Certificate" and bring it up to our domain controller.
<Screenshot Server Diag state upload issuing CA>>
Now we can Import the certificate by running our server diagnostics again and uploading it into our domain forrest.
Attention
Whilst doing steps as publishing certificates in a domain it is very helpful to run
- gpupdate /force
on every domain controller inside the forest beginning with the one where we ran the server diagnostics tool