Having certificate based authentication requires you to have a Certificate Authority that will issue certificates for your smart cards. We recommend using a PKI as a service CA such as our EZCA tool to have a compliant, HSM backed CA without all the management overhead. However, for organizations that require on-premises PKI deployments, EZCMS can connect to your existing windows (ADCS).
To establish this connection you are going to need: your ADCS Certificate Authority running on a Windows Server and another windows server that will be used as a certificate agent.