Breadcrumbs

Create a Template with Key Archival Enabled

  1. Open the command prompt and run the certtmpl.msc command

  2. Right-click the User template and select Duplicate Template

image-20251110-092215.png

Figure 56: Certificate Template window

  1. Select appropriate windows version under Certificate Authority and Certificate Recipient drop-down box under Compatibility Settings

  2. Click OK

image-20251110-092226.png

Figure 57: Compatibility window

  1. On the Resulting Changes menu click OK

  2. Go to the General tab and enter a name for the template (UserKeyArchival)

  3. Go to the Request Handling tab and select the check box for Archive Subject’s encryption private key

image-20251110-092414.png

Figure 58: Request Handling window

If you are using Smartcard Authentication, the prompt will go on the PIN Pad device to insert Smartcard and enter the pin. Then press OK button on the PIN Pad.

  1. Select the Subject Name tab. Uncheck the check box for Include e-mail name in subject name and uncheck the check box for E-mail name

image-20251110-092439.png

Figure 59: Subject Name Tab window

  1. Click Apply and then Click OK