You must install the Certificate Template Snap-In for Microsoft Management Console (MMC) to edit certificate template permissions. This can be done from an existing domain controller, or on the same machine where you installed Autoenrollment Server.
Open Remote Server Administration Tools > Role Administration Tools > Active Directory Certificate Services Tools and select Certification Authority Tools.
Select Start > Administrative Tools > Server Manager, right click Server Manager and choose Add Features. Open Remote Server Administration Tools > Role Administration Tools > Active Directory Certificate Services Tools and select Certification Authority Tools. Select Next, then Install.
The Certification Authority Microsoft Management Console (MMC) opens. In the MMC, double-click the CA name, right-click Certificate Templates, and then click Manage. The Certificate Templates console opens. All of the certificate templates are displayed in the details pane.
Go to File > New from the template. It leads you to the library of Word certificate designs. Look for the search bar at the top right corner. Type in “certificate” to find relevant results.
The Microsoft Management Console (MMC) with the Certificates snap-in is used to view and manage SSL server certificates, Intermediates certificates, and Trusted Root CA certificates.
On Windows, you can manage certificates from the Microsoft Management Console (MMC) snap-in, either for your user account, or for the computer account. To open the Certificates snap-in (for the current Windows user): Run certmgr.msc at the command line.
The Certificate Templates container is stored in Active Directory under the following location: "CN=Public Key Services, CN=Services, CN=Configuration, DC=..." The container contains objects of type pKICertificateTemplate; each of these objects is referred to in this protocol specification as a certificate template.
Click File, and then click Add/Remove Snap-in. In the available snap-ins list, click Certificate Templates, and then click Add. Certificate Templates is now located under Console Root in the MMC. Double-click it to view all the available certificate templates.
This type of certificate store is local to the computer, global to all users on the computer, and is located under the HKEY_LOCAL_MACHINE root in the registry. This type of certificate store is local to a user account on the computer, and is located under the HKEY_CURRENT_USER registry root.
Click Certification Authority > CA_name > Certificate Templates, where CA_name is the container for the CA you set up earlier in Preparing a computer to be a Certificate Authority (CA).
Right-click and select New > Certificate Template to Issue.
Introduction: My name is Aron Pacocha, I am a happy, tasty, innocent, proud, talented, courageous, magnificent person who loves writing and wants to share my knowledge and understanding with you.
We notice you're using an ad blocker
Without advertising income, we can't keep making this site awesome for you.
