1
00:00:07,200 --> 00:00:14,850
You can configure or several other settings for each cert template besides security settings.

2
00:00:14,850 --> 00:00:22,410
Be aware however that the number of configurable options depends on the certificate tempered version.

3
00:00:22,500 --> 00:00:31,560
For example version 1 certificate templates do not allow modification of any settings except for security

4
00:00:31,980 --> 00:00:38,640
while you can use certificate templates from later versions to configure most of their way lable options

5
00:00:39,240 --> 00:00:48,840
Windows Server 2016 like previous versions of Windows Server provides several default certificate templates

6
00:00:49,440 --> 00:00:58,480
list default templates are useful for purposes such as Code sign and for digitally signing software.

7
00:00:58,630 --> 00:01:08,400
Use an encrypted file and file system or airfares for encrypting data and allowing users to sign in

8
00:01:08,700 --> 00:01:14,450
with a smartcard to customize a template for your organization.

9
00:01:14,460 --> 00:01:23,220
You can duplicate the template and then modify the service certificate configuration now to configure

10
00:01:23,220 --> 00:01:34,010
templates you must first determine the format and content of a certificate based on the certificates

11
00:01:34,130 --> 00:01:35,780
intended to use.

12
00:01:35,780 --> 00:01:44,180
You have to determine the process for creating and submitting a valid certificate request.

13
00:01:44,190 --> 00:01:54,360
You also have to determine which CSP is supported and set the key lands set their validity period and

14
00:01:54,660 --> 00:02:01,230
determine the enrollment process or enrollment in enrollment requirements

15
00:02:03,670 --> 00:02:11,380
please note that certificate usage might relate to user so computers based on the types of security

16
00:02:11,380 --> 00:02:19,000
implementations that are necessary for using the public infrastructure or PGI.

17
00:02:19,060 --> 00:02:27,160
Now you also can define a certificate purpose in certificate certain certificate templates can be a

18
00:02:27,310 --> 00:02:36,700
single purpose a single purpose certificate serves one purpose such as allowing users to sign in with

19
00:02:36,700 --> 00:02:45,100
a smartcard organizations use single purpose certificates when the certificate configuration differs

20
00:02:45,370 --> 00:02:49,330
from other certificates that are deploying.

21
00:02:49,330 --> 00:02:57,700
For example if all users receive a certificate for a smartcard signing but only a couple of groups will

22
00:02:57,700 --> 00:03:00,750
receive a certificate for airfares.

23
00:03:00,940 --> 00:03:10,210
Then organizations will keep these certificates and templates separate to ensure that users only receive

24
00:03:10,210 --> 00:03:19,810
the required certificate and other purposes multipurpose a multipurpose certificate serves more than

25
00:03:19,810 --> 00:03:22,510
one purpose at the same time.

26
00:03:22,510 --> 00:03:31,630
While some templates such as the user template serve multiple purposes by default organisations often

27
00:03:31,990 --> 00:03:36,490
will modify templates to serve additional purposes.

28
00:03:36,520 --> 00:03:45,630
For example if a company intends to issue certificates for this purposes lowest purposes can combine

29
00:03:45,720 --> 00:03:54,610
into a single certificate template to reduce administrative effort and maintain Next up we'll be talking

30
00:03:54,610 --> 00:03:59,240
about options for updating a certificate template.

31
00:03:59,250 --> 00:04:00,130
I will sue the.