You can create a new certificate template by duplicating an existing template and using the existing template's properties as the default for the new template. Different applications and types of certification authorities (CAs) support different certificate templates. For example, some certificate templates can only be issued and managed by enterprise CAs running Windows Server 2003, and some may require that the CA be running Windows Server 2008. Review the list of default certificate templates, and examine their properties to identify the existing certificate template that most closely meets your needs. This will minimize the amount of configuration work that you need to do.

Membership in Domain Admins, or equivalent, is the minimum required to complete this procedure. For more information, see Implement Role-Based Administration.

To create a new certificate template
  1. Open the Certificate Templates snap-in.

  2. Right-click the template to copy from, and then click Duplicate Template.

  3. Choose the minimum version of CA that you want to support.

  4. Type a new name for this certificate template.

  5. Make any necessary changes, and click OK.