Use a smart card Client User, domain user User Autoenrollment or the CA Web Authentication enrollment tool If your enterprise CA is on a computer running one of the following operating systems, the RAS and IAS Servers and Workstation Authentication templates are available for use: Windows Server 2003, Enterprise Edition Windows Server 2003, Datacenter Edition Windows Server 2003, Enterprise Edition for Itanium-based Systems Windows Server 2003, Datacenter Edition for Itanium-based Systems Windows Server 2003, Enterprise x64 Edition Windows Server 2003, Datacenter x64 Edition Windows Server 2008 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 Windows Server 2016 Use the following table to determine when to use these templates. Preferred Alternate Certificate Certificate certificate certificate Object and domain template purpose enrollment enrollment membership method method a certificate by VPN or NPS server, RAS and IAS Server Autoenrollment using the domain member Server Authentication Certificates Request a Client running certificate by Windows 8.1 or Workstation Client Autoenrollment using the Windows 10, domain Authentication Authentication Certificates member Install from a VPN or NPS server, RAS and IAS Server CA Web floppy disk or non-domain member Server Authentication enrollment tool portable USB drive Client running Install from a Windows 8.1 or Workstation Client CA Web floppy disk or Windows 10, Authentication Authentication enrollment tool portable USB member drive
User, domain user User Client Authentication Autoenrollment Use a smart card or the CA Web enrollment tool If your enterprise CA is on a computer running one of the following operating systems, the RAS and IAS Servers and Workstation Authentication templates are available for use: Windows Server 2003, Enterprise Edition Windows Server 2003, Datacenter Edition Windows Server 2003, Enterprise Edition for Itanium-based Systems Windows Server 2003, Datacenter Edition for Itanium-based Systems Windows Server 2003, Enterprise x64 Edition Windows Server 2003, Datacenter x64 Edition Windows Server 2008 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 Windows Server 2016 Use the following table to determine when to use these templates. Object and domain membership Certificate template Certificate purpose Preferred certificate enrollment method Alternate certificate enrollment method VPN or NPS server, domain member RAS and IAS Server Server Authentication Autoenrollment a certificate by using the Certificates Client running Windows 8.1 or Windows 10, domain member Workstation Authentication Client Authentication Autoenrollment Request a certificate by using the Certificates VPN or NPS server, non-domain member RAS and IAS Server Server Authentication CA Web enrollment tool Install from a floppy disk or portable USB drive Client running Windows 8.1 or Windows 10, member Workstation Authentication Client Authentication CA Web enrollment tool Install from a floppy disk or portable USB drive
Windows%20Server%202016%20Network%20Policy%20Server%20Technical%20Reference.docx