You are the newly appointed network administrator at Domain.com. The Domain.com network consists of a single Active Directory domain named Domain.com. All servers on the Domain.com network run Windows Server 2008 and all client computers run Windows Vista.
At present the Domain.com network makes use of a Windows Server 2008 Enterprise certificate authority (CA) to issue certificates. During the course of the day you receive an instruction from
the CIO to implement key archival.
What should you do?

A.
Your best option in this scenario would be to revoke the Enterprise subordinate CA.

B.
Your best option in this scenario would be to have automatic enrollment configured for computers that is configured to host all encrypted files.

C.
Your best option in this scenario would be to have the private key archived on the server.

D.
Your best option in this scenario would be to have the Hisecdc security template configured.

Explanation:
Thereafter a user certificate should be issued to users of the encrypted files.