19.5. Choosing a Certificate Template

If your organization chooses to proceed with deploying Web Server certificates to internal Web servers, the default Web Server certificate template meets the needs of most companies. Typically, the only change that must be performed is to modify certificate template permissions to enable Read and Enroll permissions at a custom universal or global group that contains Web server administration user accounts.

---

Note:

Although you can create a version 2 certificate template based on the Web Server certificate template to enable modification of application policies or certificate policies, this prevents the automated submission of the certificate request from Internet Information Services (IIS). Instead, you must generate a request file and then submit the request file to the CA, designating the custom version 2 certificate template during the submission.

---