Disabling certificate templates

In some situations, you may want to disable a particular certificate template for WSTEP enrollments. You can either:

• Open the Microsoft certificate template properties dialog, select the Security tab, and disable the Read permission for the WSTEP service account.
• Log in to PKIaaS and unassign the CA previously assigned in Selecting CAs for certificate templates.

ℹ While disabled, certificate templates remain defined in Active Directory but can no longer be used to enroll certificates.