You have an enterprise certification authority (CA) named ContosoCA. Recovery agents are configured for ContosoCA.

You duplicate the User certificate template and name it Cont_User. You plan

to issue the certificates based on Cont_User to provide users with the ability to encrypt email messages and files.

You need to ensure that the recovery agents can access any user-encrypted files and email messages if the users lose their certificate.

Wh

at should you do?

A. Modify the Recovery Agents settings for ContosoCA.

B. Issue a certificate based on a key recovery agent certificate.

C. Modify the Request Handling settings for Cont_User.

D. On ContosoCA, configure the Key Recovery Agent template as

a certificate template to issue.