> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Create the PIV - PIV Authentication certificate template

Use this procedure to create the PIV-PIV Authentication certificate template.

It is important to create this template first because you will create the other PIV templates described in this section by duplicating this template. Some settings in this template are common to all the PIV templates.

1. On the **Microsoft CA** machine, go to **Start > Windows Administrative Tools >** **Certification Authority**.

2. Click your Certificate Authority to expand the root folder.

   ![Root Folder](/assets/images/root-folder-f70cabd09cdf2326b9799c92cb6c3af3.png)

3. Right-click **Certificate Templates**, and then select **Manage**. The **Certificate Templates Console** appears.

   ![Certificate Templates Console](/assets/images/certificate-templates-console-f26a8f550533de26c1fa7e4fd1135a40.png)

4. Scroll the template list, right-click the **User** template and select **Duplicate Template**. The **Properties of New Template** dialog box appears.

5. In the **Compatibility Settings**, select the following:

   1. From the **Certificate Authority** drop-down list, select
      - **Windows Server 2012R2** if you are running on a 2012R2 server
      - **Windows Server 2016** if you are running on Windows Server 2016 or later
   2. From the **Certificate Recipient** drop-down list, select
      - **Windows 8.1/Windows Server 2012R2** if you are running on a 2012R2 server
      - **Windows 10/Windows Server 2016** if you are running on Windows Server 2016 or later
   3. Click **OK**.
   4. (Optional) If the **Show resulting changes** check box is selected, a message lists the options that will be added with you choice. Click **OK** to dismiss the message.

6. Click the **General** tab.

   ![Piv Authentication](/assets/images/piv-piv-authentication-b30897b24c31c5b971d21dd6b98c15a2.png)

7. Configure the following settings:

   1. In the **Template display name** field, enter PIV - PIV Authentication. The Template name field is filled in automatically with the template display name (with no spaces).
   2. Optional. **Select** **Publish certificate in Active Directory**.

8. Click the **Request Handling** tab.

9. From the **Purpose** drop-down list, select **Signature and smartcard logon**.

   When asked to confirm the change, click **Yes**.

   ![Request Handling Confirmation](/assets/images/request-handling-confirmation-7b3c712b33a2456488fa5d22911f089a.png)

10. Click the **Cryptography** tab, and configure the following:

    ![Cryptography Tab](/assets/images/cryptography-tab-8ba40b84bcd985e3c665556664b048b1.png)

    1. From the **Provider Category** drop-down list, select **Key Storage Provider**.
    2. From the **Algorithm name** drop-down list, select **RSA**.
    3. Set the **Minimum key size** to 2048.
    4. From the **Request hash** drop-down list, select **SHA256**.

11. Click the **Security** tab and under **Permissions for Authenticated Users** reduce the permissions to no more than **Read**.

12. Add the `<domain_user>` and select **Read** and **Enroll**.

13. For all other users and groups, review the permissions and ensure that they have the desired access policy.

14. Click the **Subject Name** tab, configure the following settings:

    1. Select **Supply** in the request and click **OK** to confirm the changes. In this case, security is maintained because only an administrator and the `<domain_user>` can request certificates associated with this template.

    ![MSCA PIV Certificate Subject Name Warning](data:image/png;base64,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)

15. Click the **Extensions** tab.

16. Select **Application Policies**, and then click **Edit**. The **Edit Application Policies Extension** dialog box appears.

    ![Edit Application Policies Extension](/assets/images/edit-application-policies-extension-560abcfb871ca53878556b3a6992f788.png)

17. Add two new policies: **Any Purpose** and **Smart Card Logon**.

    1. On the **Edit Application Policies Extension** dialog box, click **Add**. The **Add Application Policy** dialog box appears.

    2. Under **Application Policies** dialog box, select **Any Purpose**, and then click **OK**.

       ![Add Application Policy](/assets/images/add-application-policy-d623ce5ee48b3f8e1da4ab942aa04e99.png)

    3. Click **Add**.

    4. From the **Application Policies** list, select **Smart Card Logon** and click **OK**.

    5. On the **Edit Application Policies Extension** dialog box, remove the application policies that are not required.

       - Select **Encrypting File System** and click **Remove**.
       - Select **Secure Email** and click **Remove**.

    6. The resulting list of application policies should have **Any Purpose**, **Client Authentication**, and **Smart Card Logon**.

    7. Click **OK** to close the dialog box.

18. In the **Extensions** tab, select **Issuance Policies** and then click **Edit**. The **Edit Issuance Policies** dialog box appears.

attention
You can add PIV policies as required by your organization. The `id-fpki-common-authentication` issuance policy provided in the following steps is used by the U.S. Federal Government. Organizations outside of the U.S. Federal Government may not be able to issue or use these issuance policies. You should test your CA policy configuration with the applications they intend to use to ensure compatibility. If your application does not support the issuance policy, then you should not configure it.

19. On the **Edit Issuance Policies** dialog box, do the following:

    1. Click **Add**. The **Add Issuance Policy** dialog box appears.

       ![New Issuance Policy](/assets/images/new-issuance-policy-69da7238ea98a7f3c6262152fe1fad8e.png)

    2. Click **New**. The **New Issuance Policy** dialog box appears.

    3. In the **Name** field, enter `id-fpki-common-authentication`.

    4. Leave **CPS location** empty.

    5. In the **Object Identifier** field, enter `2.16.840.1.101.3.2.1.3.13`.

    6. Click **OK** to create the new extension policy.

20. If you chose to **Publish to Active Directory**, do the following:

    1. Click the **Issuance Requirements** tab.
    2. Select **The number of authorized signatures** and enter **1** in the text box.
    3. From the **Policy type required in signature** drop-down list, select **Application policy**.
    4. From the **Application policy** drop-down list, select **Certificate Request Agent**.

21. Click **OK** to close the open dialog boxes to return to the **Certificate Templates Console**.

    The **PIV - PIV Authentication** certificate template is added to the list of templates.