Certificate template for Derived PIV Authentication
Requirements:
The account the IDMS server is running as must be able to access the Microsoft CA.
Create the Certificate Template
| Step Number | Step | Description |
|---|---|---|
| 1 | Open the Certificate Template Snap In | |
| 2 | Locate the Smart Card Logon Certificate Template, Click Duplicate | |
| 3 | Name the template DC_PIV_AUTHENTICATION | |
| 4 | Click Request Handling
| |
| 5 | Click Security
| |
| 6 | Click Subject Name
| |
| 7 | Click Issuance Requirements Check This number of authorized signatures Application Policy: "Certificate Request Agent"
| |
| 8 | Save the template | |
| 9 | Go to CA, Certificate Templates, right click, New, Certificate Template To Issue
| |
| 10 | Select Template | |
| 11 | Restart CA service |
