Setting certificate templates for NDES

  1. From your computer, launch the registry editor.
  2. Navigate to HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Cryptography > MSCEP.
  3. Configure the following, and then set them to MVEWebServer:

    • EncryptionTemplate

    • GeneralPurposeTemplate

    • SignatureTemplate

  4. Give the SCEPSvc user full permission to MSCEP.
  5. From IIS Manager, expand the CA, and then click Application Pools.
  6. From the right panel, click Recycle to restart the SCEP application pool.
  7. From IIS Manager, expand the CA, and then expand Sites > Default Web Site.
  8. From the right panel, click Restart.