On the Extensions tab: Click Application Policies > Edit is added as an application policy. Ensure ‘Client Authentication’ Click Ok If possible, configure to this This sets the ‘Basic Constraints’ ‘Enable Extension’. certificate to belong to an endpoint, and not a subsequent signer. (optional) Edit and add Issuance Policies must be ‘Issuance Policies’ ‘All Issuance Policies’. configured, to allow the CA to actually issue the certificate. On the Request Handling Tab: Uncheck Allow Private Key to be Exported. Select without Requiring any user ‘Enroll Subject input’ On the Subject Name Tab Select In any security warnings. This is necessary since the “Supply Request”, ignore certificate is not being created by an Active Directory member, but through SCEP instead. On the Cryptography Tab Select can use any provider available on the ‘Requests subject’s computer’. If you are using a SCEP service account add this user in the Security Tab. See the following for more details: For our test we are just using ‘Administrator’.
On the Extensions tab: Click Application Policies > Edit Ensure ‘Client Authentication’ is added as an application policy. Click Ok If possible, configure ‘Basic Constraints’ to ‘Enable this Extension’. This sets the certificate to belong to an endpoint, and not a subsequent signer. (optional) Edit ‘Issuance Policies’ and add ‘All Issuance Policies’. Issuance Policies must be configured, to allow the CA to actually issue the certificate. On the Request Handling Tab: Uncheck Allow Private Key to be Exported. Select ‘Enroll Subject without Requiring any user input’ On the Subject Name Tab Select “Supply In Request”, ignore any security warnings. This is necessary since the certificate is not being created by an Active Directory member, but through SCEP instead. On the Cryptography Tab Select ‘Requests can use any provider available on the subject’s computer’. If you are using a SCEP service account add this user in the Security Tab. See the following for more details: For our test we are just using ‘Administrator’.