Network Wizkid's Technical Knowledge Base

In this article, I will walk through how to create user and machine certificates using Microsoft Windows Server 2012 R2. We will also take a look at how to enable auto-enrollment of certificates to users and machines. This post is particularly useful if you would like to create User and Computer certificates for authentication against Cisco Identity Services Engine (ISE). The methods I have used in this particular article may differ depending on your active directory groups and group policies but in theory, you should be able to apply the same principles and achieve the same results. This article assumes you already have a CA running within your server environment along with a user to test enrolment of certificates. Create Certificate Templates The first thing we need to do is to create certificate templates. Default templates do exist but it’s easier to duplicate them and change the settings to what you need for your environment. On Server 2012, open your server manager dashboard and