Anyconnect client certificate using Certificate Services

Question

Hi, I'm trying to set up a client certificate for Anyconnect using Microsoft CA Services. From this topic (https://community.meraki.com/t5/Security-SD-WAN/AnyConnect-with-Certificate-Authentication/m-p/14535...) seems like it's possible.

NOTE: my VPN users are not AD-authorized (because not all of them are AD users)

I've installed Certificate Services on my Server 2012 R2 and set it up using default values.

My question: can anyone show me how to create the client certificates?

Thanks