Configuring an Enterprise CA

Applies To: Windows Server 2003 with SP1

This section shows how a Microsoft Enterprise CA must be configured to issue a certificate template after it has been created.

How to Configure an Enterprise CA

To configure an Enterprise CA

1. On the Administrative Tools menu on a Windows Server 2003 console, open the Certification Authority snap-in.

2. In the console tree, expand the Certification Authority, and then click Certificate Templates (Figure 4).

   Figure 4: Selecting Certificate Templates

3. Right-click Certificate Templates, click New, and then click Certificate Template to Issue.

4. In the Enable Certificate Templates dialog box (Figure 5), click Auto Enroll Smartcard User (this is the certificate template name that was created previously), and then click OK.

   (See Creating a New Template for the Autoenrollment of a Smart Card.)

   Figure 5: Enabling a Certificate Template on a CA

   Note

   Due to replication latency and template caching in the registry, a certification authority may not be able to issue a certificate template immediately. The timing of issuance is dependent on replication latency between domain controllers.

5. Close the Certification Authority MMC snap-in.