Where to save krb5.ini and bscLogin.conf files?

We're in the process of setting up Windows AD authentication and Kerberos SSO for BI 4.4. We're total newbies at this!

In the BI Platform Administrator Guide and also in the knowledge base article Configuring Active Directory Manual Authentication and SSO for BI4, it says we should save the krb5.ini and bscLogin.conf to C:\Windows.

My question is, do the files go on the application server (where the CMC is) or on the web server? We're running separate servers.

Same question applies to the keytab file for Kerberos. Where does it go? More than one location?