When managing version 2 certificate templates, I can define "Allow private key to be exported" in a template under Request handling tab. If I leave that box unchecked, then publish the template in question and request a certificate using that template, under Certificate properties window the box for "Make private key exportable" is unchecked by default, butI can check it and thus export the certificate with the private key later if I want.
I found https://technet.microsoft.com/en-us/library/cc754329.aspx somewhat vaguely referencing to the option, but how is this interpreted: "A private key is exportable only when it is specified in the certificate request or certificate template that was used to create the certificate."
Emphasis on the "or" as do I understand this correctly: Can either one of the selection boxes define whether it's exportable or not and the template settings do not overrun this in any way if it's selected when requesting the certificate?