NDES/SCEP/MSCEP is designed to only use one template from the certificate authority. This template is specified in the registry and must be edited using Registry Editor.

  1. Launch the Registry Editor by running regedit.exe from the Windows Desktop.
  2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MSCEP (or NDES/SCEP).
  3. Right-click the General Purpose Template and select Modify.
  4. Replace the value IPSECIntermediateOffline with the template name being used.

    Certs_Microsoft_NDES_25

  5. Close the Registry Editor.

  6. Restart Internet Information Services by opening a command prompt and running iisreset.