Certificate templates
Now, we have the working PKI, and we can turn off the stand-alone root CA. It should only be brought online if the issuing CA certificates are expired or PKI is compromised to generate new certificates.
Once the CA is ready, then objects and services can be used for certificates. The CA comes with the predefined Certificates Templates. These can be used to build custom certificate templates according to the organization requirements and publish it to AD.
The Certificate Templates MMC can be accessed using Run | MMC | File | Add/Remove Snap-in... | Certificate Templates.
To create a custom template, right-click on a template and click on Duplicate Template:
Then, it will open up the properties window and can change the ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access