Creating and configuring certificate templates

In your Active Directory, create and configure Windows certificate templates for WSTEP enrollment.

To create and configure a Windows certificate template

1. If not already installed, install the Certificate Templates snap-in as explained in Installing the default set of Microsoft Certificate Templates using the snap-in.

2. Select the existing certificate template that most closely meets your desired specs.

3. Right-click on the existing template and select Duplicate template.

4. Configure settings in the following tabs in the Properties of the New Template dialog.

   • Compatibility

   • Cryptography

   • Extensions

   • General

   • Issuance requirements

   • Key Attestation

   • Request Handling

   • Security

   • Server

   • Superseded Templates

5. Click OK.