Under the Security tab, set the following options.
Option | Value |
|---|---|
Groups or usernames | The Supply in request option allows authorized users to supply the subject name in the request (see Subject Name tab). Allowing users to supply the subject name in a request is a potential security risk, as that can give users the ability to specify additional subject names, enabling potential user impersonation and unauthorized access to systems. If the Supply in request option is configured, only highly-trusted people must be granted access to use this template. Select the groups or users that will use the new certificate template. For example, select the Domain Users group to use a copy of the User certificate template. If the group or user is not listed, click Add to add the group or user to the list. |
Permissions for Authenticated Users | Set the following Allow permissions for the selected group: Read, Enroll, Autoenroll. |