Creating and configuring certificate templates

In your Active Directory, create and configure Windows certificate templates for WSTEP enrollment.

To create and configure a Windows certificate template:

1. If the Certificate Templates snap-in is not already installed, install it by following Installing the default set of Microsoft Certificate Templates using the snap-in.

2. Select the existing certificate template that most closely meets your desired requirements.

3. Right-click the existing template and select Duplicate Template.

4. Configure the settings in the following tabs of the Properties of New Template dialog.

   • Compatibility
   • Cryptography
   • Extensions
   • General
   • Issuance requirements
   • Key Attestation
   • Request Handling
   • Security
   • Server
   • Superseded Templates

5. Click OK.