The user must create a certificate template for the certificate enrollment. Do the following to copy from an existing certificate template:
Log in to the Enterprise CA with CA administrator credentials.
Expand the CA, right‑click Certificate Templates, and then click Manage.
In the Certificate Templates Console, right‑click Web Server Certificate Template, and then click Duplicate Template.
From the General tab of the template, name the template MVEWebServer.
In the Security tab, give the CA administrator Read, Write, and Enroll permissions.
Give Read and Enroll permissions to the authenticated users.
In the Subject Name tab, select Supply in the request.
In the General tab, set the certificate validity period.
If you plan to use this certificate template for issuing a 802.1X Certificate for printers, then do the following:
From the Extensions tab, select Application Policies from the list of extensions included in this template.
Click Edit > Add.
In Add Application Policy dialog box, select Client Authentication.
Click OK.
In the Certificate Template Properties dialog box, click OK.
In the CA window, right‑click Certificate Templates, and then click New > Certificate template.
Select MVEWebServer, and then click OK.