> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Create the PIV - Card Authentication certificate template

1. On the **Microsoft CA** machine, go to **Start > Windows Administrative Tools >** **Certification Authority**.

2. Click your Certificate Authority to expand the root folder.

   ![Root Folder](/assets/images/root-folder-f70cabd09cdf2326b9799c92cb6c3af3.png)

3. To set the user permissions, right-click **Certificate Templates**, and then select **Manage**. The **Certificate Templates Console** appears.

   ![Certificate Templates Console](/assets/images/certificate-templates-console-a0ed824eb7d67ce9219bd3d7541885cc.png)

4. Scroll the template list, right-click the **PIV - PIV Authentication** template and select **Duplicate Template**. The **Properties of New Template** dialog box appears.

   ![Piv Card Authentication](/assets/images/piv-card-authentication-1779827bc8060b5273b5313e7363370d.png)

5. Click the **General** tab, and configure the following settings:

   1. In the **Template display name** field, enter `PIV - Card Authentication`. The Template name field is filled in automatically with the template display name (with no spaces).
   2. Deselect **Publish certificate in Active Directory**.

6. Click the **Request Handling** tab.

7. From the **Purpose** drop-down list, select **Signature**.

   When asked to confirm the change, click **Yes**.

   ![Request Handling Confirmation](/assets/images/request-handling-confirmation-7b3c712b33a2456488fa5d22911f089a.png)

8. Click the **Extensions** tab.

9. Select **Application Policies**, and then click **Edit**. The **Edit Application Policies Extension** dialog box appears.

   1. Add the **PIV Card Authentication object identifier** as follows:
   2. On the **Edit Application Policies Extension** dialog box, click **Add**. The **Add Application Policy** dialog box appears.
   3. Click **New**. The **New Application Policy** dialog box appears.
   4. In the **Name** field, enter PIV Card Authentication
   5. In the **Object Identifier** field, enter 2.16.840.1.101.3.6.8
   6. Click **OK** to create the new extension policy.
   7. Click **OK** again to return to the **Edit Application Policies Extension** dialog box.

10. On the **Edit Application Policies Extension** dialog box, remove the application policies that are not required.

    1. Select **Any Purpose** and click **Remove**.
    2. Select **Client Authentication** and click **Remove**.
    3. Select **Smart Card Logon** and click **Remove**.

11. Click **OK** to close the dialog box.

12. In the **Extension** tab, select **Issuance Policies** and then click **Edit**. The **Edit Issuance Policies** dialog box appears.

attention
You can add PIV policies as required by your organization. The `id-fpki-common-cardauth` issuance policy provided in the following steps is used by the U.S. Federal Government. Organizations outside of the U.S. Federal Government may not be able to issue or use these issuance policies. You should test your CA policy configuration with the applications they intend to use to ensure compatibility. If your application does not support the issuance policy, then you should not configure it.

13. On the **Edit Issuance Policies** dialog box, do the following

    1. Select `id-fpki-common-authentication` and then click **Remove**.
    2. Click **Add**. The **Add Issuance Policy** dialog box appears.
    3. Click **New**. The **New Issuance Policy** dialog box appears.
    4. In the **Name** field, enter `id-fpki-common-cardAuth`.
    5. Leave **CPS location** empty.
    6. In the **Object Identifier** field, enter `2.16.840.1.101.3.2.1.3.17`
    7. Click **OK** to create the new issuance policy.

14. Click the **Issuance Requirements** **tab**, and do the following:

    1. Deselect (disable) all of the settings.
    2. Click **OK**.

15. Click **OK** to close the open dialog boxes to return to the **Certificate Templates Console**.

    The **PIV - Card Authentication** certificate template is added to the list of templates.