AD CS certificate template requirements
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/windowsserverdocs · commit e73ce8f · +18 −19 lines · also on GitHub
11
---
2
−title: Manage Certificate Templates
3
−description: You can use this article to understand how to manage Active Directory Certificate Services Certificate Templates.
2
+title: Manage Certificate Templates in Windows Server
3
+description: This article describes how to manage Active Directory Certificate Services Certificate Templates in Windows Server.
44
author: Orin-Thomas
55
ms.topic: conceptual
66
ms.author: orthomas
7
−contributor: orthomas
8
−ms.date: 01/10/2024
7
+ms.date: 01/31/2024
98
---
109
1110
# Manage Certificate Templates
1211
13
−Certificate Templates are managed through the Certificate Templates Microsoft Management Console (MMC) snap-in. You can use this snap-in to manage AD CS both locally and remotely. You must be a member of Domain Admins to access and administer certificate templates for a domain. To add this snap-in, install the AD CS management tools on the management computer. The AD CS management tools are part of the Remote Server Administration Tools (RSAT). You can install the management tools on a Windows Server computer by running the following PowerShell command from an elevated PowerShell session:
12
+Certificate Templates are managed through the Certificate Templates Microsoft Management Console (MMC) snap-in. You can use this snap-in to manage Active Directory Certificate Services (AD CS) both locally and remotely. You must be a member of Domain Admins to access and administer certificate templates for a domain. To add this snap-in, install the AD CS management tools on the management computer. The AD CS management tools are part of the Remote Server Administration Tools (RSAT). You can install the management tools on a Windows Server computer by running the following PowerShell command from an elevated PowerShell session:
1413
1514
```powershell
1615
Install-WindowsFeature RSAT-ADCS
⋯ 2 unchanged lines
1918
To configure an MMC to use the Certificate Templates snap-in:
2019
2120
1. Right click Start, click Run, and then type mmc.
22
−2. On the File menu, click Add/Remove Snap-in.
23
−3. On the Add and Remove Snap-ins dialog box, double-click the Certificate Templates snap-in to add it to the list. Click OK.
21
+1. On the File menu, click Add/Remove Snap-in.
22
+1. On the Add and Remove Snap-ins dialog box, double-click the Certificate Templates snap-in to add it to the list. Click OK.
2423
2524
## Create a new certificate template
2625
⋯ 2 unchanged lines
2928
To create a new certificate template:
3029
3130
1. Open the Certificate Templates snap-in and connect to the AC CS Enterprise root or subordinate server.
32
−2. Right-click the template to copy from, and then click Duplicate Template.
33
−3. Choose the minimum operating system version of AD CS CA that you want to support. Currently the most recent version of Windows Server that you can select is Windows Server 2016. You can also select the minimum recipient operating system for the certificate template, with the most recent version being Windows 10/Windows Server 2016.
34
−4. Provide a name for the certificate template and configure the template settings.
31
+1. Right-click the template to copy from, and then click Duplicate Template.
32
+1. Choose the minimum operating system version of AD CS CA that you want to support. Currently the most recent version of Windows Server that you can select is Windows Server 2016. You can also select the minimum recipient operating system for the certificate template, with the most recent version being Windows 10/Windows Server 2016.
33
+1. Provide a name for the certificate template and configure the template settings.
3534
3635
## Delete a certificate template
3736
⋯ 2 unchanged lines
4039
To delete a certificate template, perform the following steps:
4140
4241
1. Open an MMC with the Certificate Templates snap-in.
43
−2. Right-click the template you want to delete, and then click Delete.
44
−3. Click Yes to confirm that you want to delete the template.
42
+1. Right-click the template you want to delete, and then click Delete.
43
+1. Click Yes to confirm that you want to delete the template.
4544
4645
## Rename a certificate template
4746
⋯ 2 unchanged lines
5049
To change a certificate template name:
5150
5251
1. Open the Certificate Templates snap-in and connect to the AD CS CA.
53
−2. Select the certificate template you want to modify. On the Action menu, click Change Names.
54
−3. Type a new name in the Template name box or the Template display name box, or both.
55
−4. Click OK to save changes.
52
+1. Select the certificate template you want to modify. On the Action menu, click Change Names.
53
+1. Type a new name in the Template name box or the Template display name box, or both.
54
+1. Click OK to save changes.
5655
5756
If the modified template is already published to issuing CAs, remove the template from Certificate Templates on those issuing CAs, then restart these issuing CA computers, and then add the renamed template to the issuing CAs. If another template supersedes the modified template, then update the superseding template by adding the modified template to the list of superseded templates.
5857
⋯ 4 unchanged lines
6362
To configure a CA to issue certificates based on a certificate template, perform the following steps:
6463
6564
1. Open the Certification Authority snap-in, and double-click the name of the CA.
66
−2. Right-click Certificate Templates, click New, and then click Certificate Template to Issue.
67
−3. Select the certificate template, and click OK.
65
+1. Right-click Certificate Templates, click New, and then click Certificate Template to Issue.
66
+1. Select the certificate template, and click OK.
6867
6968
## Remove a Certificate Template from a CA.
7069
⋯ 2 unchanged lines
7372
To remove a certificate template from a CA:
7473
7574
1. Open the Certification Authority snap-in.
76
−2. In the console tree, click Certificate Templates.
77
−3. In the details pane, right-click the certificate template that you want to delete, and then click Delete.
75
+1. In the console tree, click Certificate Templates.
76
+1. In the details pane, right-click the certificate template that you want to delete, and then click Delete.
7877
7978
You cannot remove the built in certificate templates.
Microsoft's Markdown source from MicrosoftDocs/windowsserverdocs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 22:20 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.