1
00:00:08,710 --> 00:00:18,600
They say in Windows Server 2016 Active Directory cert services support for versions of certificate templates.

2
00:00:18,810 --> 00:00:25,830
Aside from correspondence with Windows server operating system versions certificate templates versions

3
00:00:26,190 --> 00:00:29,270
also have functional differences.

4
00:00:29,370 --> 00:00:34,390
Let's see the differences as follows.

5
00:00:34,410 --> 00:00:36,160
Version 1 template.

6
00:00:36,210 --> 00:00:45,210
The only modification allowed to Version 1 templates is the ability to change the permission to read

7
00:00:45,210 --> 00:00:50,400
write allow and disallow enrollment of the certificate template.

8
00:00:50,470 --> 00:00:59,550
When you install SC version 1 certificate templates are created by default version 2 templates you can

9
00:00:59,550 --> 00:01:08,190
customize several sets and version 2 templates the default installation of ADC yes provides several

10
00:01:08,280 --> 00:01:17,100
reconfigure Version 2 templates you also can create Version 2 templates based on the requirements of

11
00:01:17,100 --> 00:01:18,930
your organization.

12
00:01:18,930 --> 00:01:26,940
Alternatively you can duplicate a version 1 certificate template to create a new version 2 template

13
00:01:27,600 --> 00:01:36,270
you then can modify and secure the newly created Version 2 certificate template templates must be a

14
00:01:36,270 --> 00:01:42,020
minimum of a minimum of version 2 to support auto enrolment.

15
00:01:43,670 --> 00:01:53,650
Version 3 template version 3 a template certificate template support cryptography next generation or

16
00:01:53,640 --> 00:02:05,020
a CNG since she provides support for field B cryptographic algorithms such as a lipstick core cryptography

17
00:02:05,480 --> 00:02:14,330
you can duplicate default version 1 and version 2 templates to upgrade them to version 3 when you use

18
00:02:14,570 --> 00:02:25,580
the version 3 cert templates you can use CNG encryption and hash algorithms for cert record requests

19
00:02:26,180 --> 00:02:36,590
issued certificates and protection of private keys for key exchange and key archival scenarios and final

20
00:02:36,590 --> 00:02:46,320
version 4 templates version 4 certificate templates are available only to a Windows Server 2012.

21
00:02:46,400 --> 00:02:55,490
Windows 8 and later operating systems to help administrators determine which operating system versions

22
00:02:55,760 --> 00:03:05,180
support which features the compatibility tab was added to the cert template properties tab it marks

23
00:03:05,300 --> 00:03:13,760
options as unavailable in the certificate template properties dependent on the selected operating system

24
00:03:13,760 --> 00:03:24,530
versions of a certificate client and see a version for cert templates also support both cryptographic

25
00:03:24,530 --> 00:03:28,640
service provider and key storage providers.

26
00:03:28,640 --> 00:03:33,890
You can also configure them to require renewal with the same key.