For Installing the default set of Microsoft Certificate Templates, you will need to log into the root domain of the forest as a user belonging to the following groups.

• Domain Admins
• Enterprise Admins