> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Set Certificate Authority permissions

After you [create the PIV-PIV Authentication certificate template](/docs/authentication-and-security/manage-certificate-authorities/configure-a-microsoft-ca/configure-microsoft-ca-for-piv-certificate-templates/create-the-piv-piv-authentication-certificate-template.md), you need to set the following permissions required to issue certificates with Microsoft CA:

User permissions

- Read
- Enroll

To set the Certificate Authority permissions, follow these steps:

1. On the **Microsoft CA** machine, go to **Start > Windows Administrative** **Tools** > **Certification Authority**.
   ![Root Folder](/assets/images/root-folder-f70cabd09cdf2326b9799c92cb6c3af3.png)
2. To set the user permissions, right-click **Certificate Templates**, and then select **Manage**. The **Certificate Templates Console** appears.
   ![Certificate Templates Console](/assets/images/certificate-templates-console-f26a8f550533de26c1fa7e4fd1135a40.png)
3. In the templates list, double-click **PIV - PIV Authentication**. The **PIV Authentication Properties** dialog appears.
4. Click the **Security** tab.
5. In the **Group or user names** list, select the name of the administrator account for the Microsoft CA host computer.
6. Under **Permissions for <user account>**, in the **Allow** column, ensure that **Read** and **Enroll** permissions are selected.
7. Click **OK** to save the settings and close the window.