SCCM 2012 : Client Authentication Certificate Templates

Creating Certificates for Workgroup and Internet client certificate templates and the process of implementing these kinds of clients, so I am going to do a multi-parter.

1. SCCM 2012 : Server Authentication Certificate Templates 
2. SCCM 2012 : Client Authentication Certificate Templates
3. SCCM 2012 : Deploying Server Authentication Certificate
4. SCCM 2012 : Configure your Clients for internet and workgroup clients
5. SCCM 2012 : Internet and Workgroup Clients​

In this section I will cover creating the Client Certificate Template.

Client Authentication Certificate Template

1. You need to open up your Certificate Authority Management Console from your CA computer or a computer with RSAT installed.

2. In the CA MMC right click on Certificate Templates and then click on Manage.

3. Find the "Workstation Authentication" Template, right click on it and Select Duplicate Template.

4. Now we need to set the proper settings on the Certificate Template your created by duplicating the "Web Server" Template:

a) On the compatibility tab, select: Windows Server 2003 for the Certification Authority.

b) On the General tab, Give the new template a Template Display Name.

c) on the Security tab, give Domain Computers "Read", "Enroll" and "Autoenroll" permissions.

d) On Request Handling tab, select "Signature" as the purpose and make sure "Allow private key to be exported"

e) On the Cryptography tab select "Request must use one of the following providers.", then check "Microsoft Enhanced Cryptographic Provider v1.0" and "Microsoft Base Cryptographic Provider v1.0"

f) On the Subject Name tab, select "Supply in the request"

Click OK. and Close the Certificate Templates Console.

5. Now back in the CA Console we are going to need to enable the new Certificate Template you created:

a) right click "Certificate Templates", then select "New" then "Certificate Template to Issue"

b) Select the Certificate Template you created and click OK.

Click OK. Now you have finished creating your Client Authentication Certificate Template