http://blogs.technet.com/b/pki/archive/2012/04/28/best-practice-for-configuring-certificate-template-cryptography.aspxStarting with Windows Vista and Windows Server 2008, the option to utilize Key Storage Providers (KSPs) in addition to Cryptographic Service Providers (CSPs) was added. These options are available when you create a Certificate Template and configure theen-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.technet.com/b/pki/archive/2012/04/28/best-practice-for-configuring-certificate-template-cryptography.aspx#3514244Tue, 14 Aug 2012 07:19:38 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3514244Ryan<p>@Paul</p> <p>KSPs aren&#39;t installed on Windows XP or 2003 (they are part of CNG, which is only available to Vista/2008+)</p> <p>As such, I expect the effect would be that auto-enrolment would not be possible (as the computer does not have the provider required to generate keys).</p> <p>Somebody who has tested this wish to confirm?</p> <div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3514244" width="1" height="1">http://blogs.technet.com/b/pki/archive/2012/04/28/best-practice-for-configuring-certificate-template-cryptography.aspx#3503646Wed, 13 Jun 2012 12:55:16 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3503646Paul<p>What is the effect for XP/2003 machines or users on those machines that are using Auto-Enrollment when a template is configured for Microsoft Software Key Storage Provider?</p> <div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3503646" width="1" height="1">