Creating and configuring certificate templates

In your Active Directory, create and configure Windows certificate templates for WSTEP enrollment.

To create and configure a Windows certificate template:

1. If not already installed, install the Certificate Templates snap-in as explained in Installing the default set of Microsoft Certificate Templates using the snap-in.

2. Select the existing certificate template that most closely meets your desired specs.

3. Right-click on the existing template and select Duplicate template.

4. Configure the settings in the following tabs of the Properties of the New Template dialog.

   • Compatibility
   • Cryptography
   • Extensions
   • General
   • Issuance requirements
   • Key Attestation
   • Request Handling
   • Security
   • Server
   • Superseded Templates

5. Click OK.