Create a certificate template from a server 2012 r2 ca mrchiyo and confirm that the minimum key size is at least 2048 this is the default in server 2012 r2 leave the default cryptography settings as the defaults yadclub