Create BopsKeyRecoveryAgent

Procedure:

1. Open the Server Manager if it is not already open.

2. Click Tools and choose Certification Authority.

3. Right-click Certificate Templates then choose Manage. The complete list of templates is displayed.

4. Duplicate the Key Recovery Agent template.

5. Set parameters to match the following screen captures.
   In the Security tab, please assign Enroll and Read permissions for all RA servers.

6. Click Apply.

7. Close the Certificate Templates Console.

8. In the Server Manager, click Tools and choose Certification Authority.

9. Right-click Certificate Templates, and Click New.

10. Click Certificate Template to Issue.

11. Select the  BopsKeyRecoveryAgent template from the list and click OK.