So the NPS server certificate template is a little simpler and easier to
deploy. It is a machine certificate much like the VPN server certificate as
well, so it goes in the local computer certificate store.
The only required EKU,
or Extended Key Usage, value for this certificate template is
the server authentication template and also,
and this is what really makes it a lot easier, is the
subject name is the server host name.
So we don't have to do that whole dance with supply and the request
like we did with the VPN server template. We can literally just build
this information from Active Directory. So let's see how to create an NPS server certificate template.