We want only certificates that require CA Certificate Manager approval to be available in the web enrollment page. Users who need to request user certificates from devices not joined to our domain will use this.
We want users to be able to auto-enroll without manager approval from domain joined computers. However, when we make a certificate template available for auto-enrollment, the certificate becomes visible in the web enrollment page.
How can we fix this?