...
ktpass -princ HTTP/tstsrv01-2016.yourdomain@YOURDOMAINyourdomain.de@YOURDOMAIN.DE -mapuser custoKerberos@yourdomain.de -crypto rc4-hmac-nt -ptype KRB5_NT_PRINCIPAL -pass secretPW! -out "C:\Program Files\custo diagnostic server\conf\tomcat.keytab"
...