Re: Certificate Templates

From: Shawn Corey [MSFT] (shawncor_at_online.microsoft.com)
Date: 01/26/04


Date: Mon, 26 Jan 2004 14:20:23 -0800

To create a new template choose the template that best matches what you
want, in you case it sounds like the User template is the best match, then
right click on it and choose Duplicate Template. This will bring up a dialog
box that allows you to change the settings of the new template before it is
saved, you can change the settings after the template is saved by either
double clicking on it or right clicking and choosing Properties.

A good pointer for certificate templates is the TechNet site, here is a link
that should help answer most of you questions on how to use templates:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/proddocs/entserver/ctcon_howto.asp
There is also much useful information under the Public Key Infrastructure
area here:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/proddocs/entserver/SE_PKI.asp

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"RG" <nobody@nowhere.com> wrote in message
news:u1tbBMF5DHA.2692@TK2MSFTNGP09.phx.gbl...
> Thanks for your help
>
> In certificate template msc, the only option I see is view object
> identifiers.  I know which object Identifier I want to choose.  How do
> create a new template and add to that template object identifier?
>
> Thanks again
>
>
> "Shawn Corey [MSFT]" <shawncor@online.microsoft.com> wrote in message
> news:%23FYChCF5DHA.2412@TK2MSFTNGP11.phx.gbl...
> > If you install a Standalone CA you should get the option for the Client
> > Authentication Certificate. If you install an Enterprise CA you will get
a
> > list of currently available templates. To manage templates on win2k3 run
> the
> > Certificate Template snap-in, either by running mmc and adding the
snap-in
> > or by running certtmpl.msc. If you are running an Enterprise CA and you
> > create a new template to make sure you set them to be issued by the CA
> > through the Certificate Server snap-in's Certificate Templates node.
> >
> > -- 
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > Use of included script samples are subject to the terms specified at
> > http://www.microsoft.com/info/cpyright.htm
> >
> >
> > "RG" <nobody@nowhere.com> wrote in message
> > news:OlcGU5D5DHA.2344@TK2MSFTNGP09.phx.gbl...
> > > It appears that there have been a change in the way user certificates
> are
> > > issued from win2k to win2k3.
> > >
> > > I am assume that I could customize security templates.  If yes, how do
I
> > go
> > > about doing that?
> > >
> > > It appears that in win2k in web enrollment station/advanced requests,
> you
> > > could specify the type of sertificate needed.  There was an option
> Client
> > > Authentication Certificate.  In addition, you could enter identifying
> > info.
> > > How do you reproduce the same effect in win2k3?
> > >
> > > Thanks in advance,
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: Error enrolling machine certs
    ... computers you have to create one by copying a V1 template and then naming ... shown under "certificate templates" in the CA Management Console for the CA ... computer as a local admin to request a computer certificate either through ... >> Group Policy which also will work for Windows 2000 computers. ...
    (microsoft.public.windows.server.security)
  • Re: Problem with certificate templates
    ... By duplicating the template you are creating a version 2 certificate ... Version 2 certificate templates can be created on any CA but can ... only be published on a Windows 2003 Enterprise Edition CA or greater. ... The webserver with the screenshots just had a systemdisk-failure. ...
    (microsoft.public.windows.server.general)
  • Re: Missiong "wireless authentication" certificate template
    ... Actually the template you want to use is the "Workstation Authentication" ... You can view this template by opening the Certificate Templates mmc. ...
    (microsoft.public.internet.radius)
  • Certificate Template Minimum Supported CAs
    ... Can new Certificate Templates be Windows 2003 Minimum Supported CA's? ... how do you set a template to be Windows 2003 Minimum Supported CA's? ... enable security template list? ...
    (microsoft.public.windows.server.security)
  • RE: Restore a deleted template
    ... please check if the User template appears. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)