Set Up Certificate Templates manually

This procedure can be skipped, when you import certificate template using Veridium RA EP Configuration as described on chapter https://veridiumid.atlassian.net/l/cp/dEsa0ss0 , steps 5,6 and 13,14
Skip this procedure also in a Citrix-only environment that uses FAS for client certificates.

In a Windows desktop environment with physical PCs and laptops or non-Citrix virtual desktops, the Active Directory Certificate Service needs two certificate templates that you must create.

• The BopsRA template enables the Registration Authority to request login certificates on behalf of VeridiumAD users.

• The BopsUser template defines certificate properties for enrolled VeridiumAD users.

Note: When creating the templates detailed below, please make sure to copy the settings in the screenshots exactly. Pay attention to the Compatibility Settings as these need to match the screenshots not the customer environment.