Active Directory Certificate profiles for computers or users can be deployed to client devices using either automatic push or manual download. Define which cryptographic service providers (CSPs) are supported by a certificate template. This new template is recommended for domain controllers running Windows Server 2008. For domain controllers running Windows Server 2003, the Domain Controller Authentication template or the Kerberos Authentication template can be used. For user certificates, if desired — supply an Active Directory username as the basis for the requested certificate.