Create an authentication template for enabling client authentication in Microsoft CA.

To create a client authentication template for Microsoft CA

1. Log into the Microsoft CA server machine.
2. Press Win + R to open the Run dialog.
3. Type "mmc” and press Enter to open the Microsoft Management Console.
4. Go to Certificate Authority.
5. Right-click Certificate Templates and select Manage.
   
   
   
6. Right-click the User template and select Duplicate Template.
   
7. In the General tab of the Properties of New Template dialog, set Template display name to Client Authentication.
8. In the Subject Name tab, enable Supply in the request.
9. In the Extensions tab, edit Application Policies to remove Encrypting File System and Secure Email.
10. Go to Certificate Authority.
11. Right-click Certificate Templates and select New >Certificate Template to Issue.
12. Select Client Authentication from the list.