Re-Enroll All Certificate Holders

Applies To: Windows Server 2008 R2

This procedure is used when a critical change is made to the certificate template and you want all subjects that hold a certificate that is based on this template to re-enroll as quickly as possible. The next time the subject verifies the version of the certificate against the version of the template on the certification authority (CA), the subject will re-enroll.

Membership in Domain Admins or Enterprise Admins, or equivalent, is the minimum required to complete this procedure. For more information, see Implement Role-Based Administration.

To re-enroll all certificate holders

  1. Open the Certificate Templates snap-in.

  2. Right-click the template that you want to use, and then click Reenroll All Certificate Holders.

Additional references