AD CS certificate template capabilities
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/windowsserverdocs · commit fadda90 · +6 −6 lines · also on GitHub
11
---
2
−title: Certificate Template concepts in Windows Server
3
−description: This article describes Certificate Templates concepts for Active Directory Certificate Services in Windows Server.
2
+title: Certificate template concepts in Windows Server
3
+description: This article describes certificate templates concepts for Active Directory Certificate Services in Windows Server.
44
author: Orin-Thomas
55
ms.topic: conceptual
66
ms.author: orthomas
7
−ms.date: 01/31/2024
7
+ms.date: 02/18/2024
88
---
99
10
−# Certificate Templates concepts
10
+# Certificate templates concepts
1111
1212
Certificate templates can greatly simplify the task of administering an Active Directory Certificate Services (AD CS) certification authority (CA) by allowing an administrator to issue certificates preconfigured for selected tasks. The Certificate Templates snap-in allows an administrator to perform the following tasks:
1313
⋯ 6 unchanged lines
2020
2121
Only an enterprise CA can issue certificates based on a certificate template. The templates are stored in Active Directory Domain Services (AD DS) for use by every CA in the forest. This allows the CA to always have access to the current standard template and ensures consistent application of the certificate policy across the forest.
2222
23
−## Certificate Template versions
23
+## Certificate template versions
2424
2525
Certificate template versions determine which features are available in a certificate template. Active Directory Certificate Services (AD CS) provides three versions of certificate templates that are available on enterprise certification authorities (CA).
2626
⋯ 1 unchanged line
2828
- Version 2 certificate templates were introduced with Windows Server 2003. An administrator can configure version 2 templates to control the way certificates are requested, issued, and used. Version 2 templates provide support for certificate autoenrollment.
2929
- Version 3 certificate templates support all version 2 template features but also provide support for Suite B cryptographic algorithms. Suite B was created by the U.S. National Security Agency to specify cryptographic algorithms that must be used by U.S. government agencies to secure confidential information. Version 3 certificate templates are available through AD CS on all supported versions of Windows Server.
3030
31
−## Default Certificate Templates
31
+## Default certificate templates
3232
3333
A number of preconfigured certificate templates that are designed to meet the needs of most organizations are included with AD CS enterprise certification authorities (CAs). New certificate templates can be created by modifying a copy of an existing preconfigured template. The default certificate templates are described in the following table:
3434
⋯ 35 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/windowsserverdocs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 09:45 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.