Certificates snap-in Install from a VPN, IAS, or NPS Server CA Web floppy disk or server, non-domain Computer Authentication enrollment tool portable USB member drive Server Install from a VPN server with Authentication and CA Web floppy disk or connection, Computer Client enrollment tool portable USB member Authentication drive Client running Install from a Windows Vista or Client CA Web floppy disk or Computer Windows XP, Authentication enrollment tool portable USB member drive Use a smart card Client User, domain user User Autoenrollment or the CA Web Authentication enrollment tool If your enterprise CA is on a computer running one of the following operating systems, the RAS and IAS Servers and Workstation Authentication templates are available for use: Windows Server 2003, Enterprise Edition Windows Server 2003, Datacenter Edition Windows Server 2003, Enterprise Edition for Itanium-based Systems Windows Server 2003, Datacenter Edition for Itanium-based Systems Windows Server 2003, Enterprise x64 Edition Windows Server 2003, Datacenter x64 Edition Windows Server 2008 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 Use the following table to determine when to use these templates. Preferred Alternate Certificate Certificate certificate certificate Object and domain template purpose enrollment enrollment membership method method a VPN, IAS, or NPS certificate by RAS and IAS Server server, domain Autoenrollment using the Server Authentication member Certificates
Certificates snap-in VPN, IAS, or NPS server, non-domain member Computer Server Authentication CA Web enrollment tool Install from a floppy disk or portable USB drive VPN server with connection, member Computer Server Authentication and Client Authentication CA Web enrollment tool Install from a floppy disk or portable USB drive Client running Windows Vista or Windows XP, member Computer Client Authentication CA Web enrollment tool Install from a floppy disk or portable USB drive User, domain user User Client Authentication Autoenrollment Use a smart card or the CA Web enrollment tool If your enterprise CA is on a computer running one of the following operating systems, the RAS and IAS Servers and Workstation Authentication templates are available for use: Windows Server 2003, Enterprise Edition Windows Server 2003, Datacenter Edition Windows Server 2003, Enterprise Edition for Itanium-based Systems Windows Server 2003, Datacenter Edition for Itanium-based Systems Windows Server 2003, Enterprise x64 Edition Windows Server 2003, Datacenter x64 Edition Windows Server 2008 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 Use the following table to determine when to use these templates. Object and domain membership Certificate template Certificate purpose Preferred certificate enrollment method Alternate certificate enrollment method VPN, IAS, or NPS server, domain member RAS and IAS Server Server Authentication Autoenrollment a certificate by using the Certificates
Windows%20Server%202012%20R2%20Network%20Policy%20Server%20Technical%20Reference.docx