Certificate renewal in AD DS, how to set up?

Question

System administration

In a network AD CA is lifted there issuance of certificates is configured. A couple of people enter the domain using smart cards, in this case RuTokens, on which certificates are written. Now at one of the user the term at the certificate approaches. I tried to extend it in advance through the console under a user who has rights to issue certificates, etc.
But when you try to create a request, an error is thrown:



New keys for other users are issued normally, but the current one cannot be extended.

Answer 1

If someone experienced looks in, please share a link to the installation and configuration guide (and configuration again, because it is 2 times more important than installation) of the certificate server.
It is possible in English, but Russian is preferable.
Thanks in advance.