Scenario: A Citrix Engineer has configured the XenMobile Public Key Infrastructure (PKI) integration with the domain-hosted Certificate Authority (CA). During
enrollment the client certificate fails to be delivered to a device. The engineer reviews the logs and finds a “401 Unauthorized” error.
Which two steps should the engineer take to correct this issue? (Choose two.)

A.
Configure ClientCertificateMappingAuthentication=True within the CA IIS configuration editor.

B.
Enable XenMobile PKI service account with “Enroll” permissions on the PKI template.

C.
Add the enrolled user needs to the correct Delivery Group within the XenMobile Console.

D.
Add the XenMobile service account as a local user within the CA server.

E.
Enable anonymous authentication within the CA IIS server.