Entrust PKI as a Service

Disabling certificate templates

In some situations, you may want to disable a particular certificate template for WSTEP enrollments. You can either:

  • Open the Microsoft certificate template properties dialog, select the Security tab, and disable the Read permission for the WSTEP service account.
  • Log in to PKIaaS and unassign the CA previously assigned in Selecting CAs for certificate templates.
 While disabled, certificate templates remain defined in Active Directory but can no longer be used to enroll certificates.