ADCS - Auto enrollment for user certificate (with private keys)

Hello,

I will deploy a WIFI architecture in my current network which will be configured with an NPS authentication and client certificate (private keys is required).

In my lab, when I export manually my client certificate, the connexion works but I am blocked for the automatic client certificate diffusion with GPO (auto-enrollemnent).

 When the client retrieve its GPO, it received only a valid public certificate but without private keys (which is required for my WIFI connexion).

I didn't find any documentation which precise how we can deploy client certificate with private keys automaticaly ?

Is someone have been confronted to this ?

Thanks in advance for your time and your help.

Regards,

Clement