You deploy a new enterprise certification authority (CA) named CA1.

You plan to issue certificates based on the User certificate

template.

You need to ensure that the issued certificates are valid for two years and support autoenrollment.

What should you do first?

A. Run the

certutil.exe

command and specify the

resubmit

parameter.

B. Duplicate the User certificate template.

C. Add

a new certificate template for CA1 to issue.

D. Modify the Request Handling settings for the CA.

Explanation:

The built-in templates to do support allow auto-enrollment. You need to duplicate the template then modify the permissions on the new

template.