Certificates in win2003

This is what i found in an article :

Make sure you do the following things (assuming the CA and IAS are on the
same machine):. Generate your enterprise root certificate.

. Generate the computer certificate and user certificate with their
private key.

. Verify that the computer certificate includes the FQDN name of the
computer.

. Verify that the computer certificate is installed in the local
computer

certificate store.

. Verify that the user certificate is installed in the local user
certificate store.

. Verify that the root CA certificate is installed in the Trusted Root
Certification Authorities store.


You can also use group policies to perform these functions automatically.
With all these things done, you can let your users use the certificate (user
or computer) to authenticate, using 802.1x to communicate with your
intranet.


My question : How do I generate the computer and user certificate with their
private keys?

thx

Gerry