The last certificate template I want to talk about in this course is the DC,
or domain controller, certificate template.
This certificate is crucial, and it's a device certificate,
so it's enrolled to servers, in this case.
And the requirements for this one, in terms of EKUs,
are the Client Authentication, Server Authentication,
Smart Card Logon, and KDC Authentication.
Obviously that's a lot.
Don't worry, there's a template we're going to use.
If you've come along this far,
you'll know it's fairly simple and straightforward to deploy these templates.
The subject name needs to be the server name,
and the certificate needs to be deployed to all of
your domain controllers; however, it's important to understand,
this certificate may already exist in your environment.
So, it's absolutely required,
but the steps that we're going to take here may or may not
be required in your specific environment.
So, let's get to creating a certificate template for the domain controller, and I'll talk about those things in a little bit more detail.