1
00:00:01,940 --> 00:00:05,950
So the NPS server certificate template is a little simpler and easier to

2
00:00:05,950 --> 00:00:10,300
deploy. It is a machine certificate much like the VPN server certificate as

3
00:00:10,300 --> 00:00:13,360
well, so it goes in the local computer certificate store.

4
00:00:13,360 --> 00:00:14,930
The only required EKU,

5
00:00:14,930 --> 00:00:18,960
or Extended Key Usage, value for this certificate template is

6
00:00:18,960 --> 00:00:21,620
the server authentication template and also,

7
00:00:21,620 --> 00:00:24,240
and this is what really makes it a lot easier, is the

8
00:00:24,240 --> 00:00:26,170
subject name is the server host name.

9
00:00:26,170 --> 00:00:29,300
So we don't have to do that whole dance with supply and the request

10
00:00:29,300 --> 00:00:32,850
like we did with the VPN server template. We can literally just build

11
00:00:32,850 --> 00:00:42,000
this information from Active Directory. So let's see how to create an NPS server certificate template.