I am having an issue where when I duplicate the user template and attempt to change the Cryptography type, the provider category is greyed out and my only option is "legacy Cryptographic Service Provider. This doesn't allow me to make the provider change either. I went back and checked my steps to no avail.
(Configured as RootCA server during these steps)
Server 2016 server
2016 DFL and FFL
Domain joined server used for the user template tasks