Install new templates and upgrade existing templates

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

 

To install new templates and upgrade existing templates

  1. Open Certificate Templates.

  2. When prompted to install new certificate templates, click OK.

Notes

  • To perform this procedure, you must be a member of the Domain Admins group or the Enterprise Admins group in Active Directory, or you must have been delegated the appropriate authority. As a security best practice, consider using Run as to perform this procedure. For more information, see Default local groups, Default groups, and Using Run as.

  • To open Certificate Templates, click Start, click Run, type certtmpl.msc, and then press Enter.

  • If this procedure has already been performed in your enterprise, you will not receive a prompt when you open Certificate Templates.

  • This procedure must be performed before any Windows 2000 enterprise certification authorities are upgraded to Windows Server 2003 family certification authorities. If any Windows 2000 enterprise certification authorities currently exist or have ever existed in your enterprise, you must perform this procedure to ensure the certificate templates are added and updated correctly.

  • This procedure must be performed on a certification authority (CA) in the certification hierarchy. Performing this procedure on a different computer may not work correctly.

  • Performing this procedure is important to apply the proper security permissions on the existing certificate templates as well as create new certificate templates. If you do not perform this procedure before upgrading your certification authorities to the Windows Server 2003 family, you will be prompted when opening the Certification Authority snap-in.

  • You must prepare the Active Directory schema with Adprep.exe for the upgrade before installing the new certificate templates. For more information on Adprep.exe, see Related Topics.

See Also

Concepts

Version 2 certificate templates
Upgrading from a Windows 2000 domain