How can I modify the AD template to get key encipherment key usage?

I am using Active Directory to generate an ECDSA certificate of 256 bits and I need it to have the key encipherment key usage but even as I can see the configuration choosen has that option the certificate doesn't have it. What am I missing?

This is how my key usage tab looks:

But this is how the resulting certificate looks:

I've tried changing the allow encryption data option but the result is the same, is there somewhere else to force this key usage?

Thanks

https://stackoverflow.com/questions/66960463/how-can-i-modify-the-ad-template-to-get-key-encipherment-key-usage April 06, 2021 at 06:17AM