Active Directory Certificate Services Features by SKU
We’ve had many requests for what services and features are available in what Windows Server version and SKU. The table below is our attempt to answer those questions.
SKU Table (NOTE: entire table describes what is available in an Enterprise CA, not a Standalone CA, installed on each Windows version; * means the feature or support is new in Windows Server 2008 R2)
| Windows Server version and SKU | Role Services Available | Certificate Templates available | Auto-enrollment & Key Archival (comes with V2 Templates) | CA Features: SMTP Exit Module & Role Separation | Cross-forest Enrollment (over DCOM protocol) |
| Windows Web Server 2008 R2 | None | NA | NA | NA | NA |
| Windows Server 2008 R2 Standard or Foundation | -Certification Authority (CA) -CA Web Enrollment -Certificate Enrollment Web Services* (policy service and enrollment service) | V1, V2*, and V3* templates | Yes* | No | No |
| Windows Server 2008 R2 Standard or Foundation / Server Core installation | -Certification Authority (CA)* | V1, V2*, and V3* templates | Yes* | No | No |
| Windows Server 2008 R2 Enterprise or Datacenter | -Certification Authority (CA) -CA Web Enrollment -Certificate Enrollment Web Services* (policy service and enrollment service) -Online Responder (OCSP) -Network Device Enrollment Service (NDES) | V1, V2, and V3 templates | Yes | Yes | Yes |
| Windows Server 2008 R2 Enterprise or Datacenter / Server Core installation | -Certification Authority (CA)* | V1, V2, and V3 templates | Yes | Yes | Yes |
| Windows Server 2008 Standard Edition | -Certification Authority (CA) -CA Web Enrollment | V1 only | No | No | No |
| Windows Server 2008 Enterprise or Datacenter Edition | -Certification Authority (CA) -CA Web Enrollment -Online Responder (OCSP) -Network Device Enrollment Service (NDES) | V1, V2, and V3 templates | Yes | Yes | No |
| Windows Server 2003 Standard Edition | -Certification Authority (CA) -CA Web Enrollment | V1 only | No | No | No |
| Windows Server 2003 Enterprise or Datacenter Edition | -Certification Authority (CA) -CA Web Enrollment (NDES available as “MSCEP” via resource kit) | V1 and V2 templates | Yes | Yes | No |
