They say in Windows Server 2016 Active Directory cert services support for versions of certificate templates.
Aside from correspondence with Windows server operating system versions certificate templates versions
also have functional differences.
Let's see the differences as follows.
Version 1 template.
The only modification allowed to Version 1 templates is the ability to change the permission to read
write allow and disallow enrollment of the certificate template.
When you install SC version 1 certificate templates are created by default version 2 templates you can
customize several sets and version 2 templates the default installation of ADC yes provides several
reconfigure Version 2 templates you also can create Version 2 templates based on the requirements of
your organization.
Alternatively you can duplicate a version 1 certificate template to create a new version 2 template
you then can modify and secure the newly created Version 2 certificate template templates must be a
minimum of a minimum of version 2 to support auto enrolment.
Version 3 template version 3 a template certificate template support cryptography next generation or
a CNG since she provides support for field B cryptographic algorithms such as a lipstick core cryptography
you can duplicate default version 1 and version 2 templates to upgrade them to version 3 when you use
the version 3 cert templates you can use CNG encryption and hash algorithms for cert record requests
issued certificates and protection of private keys for key exchange and key archival scenarios and final
version 4 templates version 4 certificate templates are available only to a Windows Server 2012.
Windows 8 and later operating systems to help administrators determine which operating system versions
support which features the compatibility tab was added to the cert template properties tab it marks
options as unavailable in the certificate template properties dependent on the selected operating system
versions of a certificate client and see a version for cert templates also support both cryptographic
service provider and key storage providers.
You can also configure them to require renewal with the same key.