You have an enterprise subordinate certification authority (CA).
You have a custom certificate template that has a key length of 1,024 bits. The template is
enabled for autoenrollment.
You increase the template key length to 2,048 bits.
You need to ensure that all current certificate holders automatically enroll for a certificate
that uses the new template.
Which console should you use?

A.
Active Directory Administrative Center

B.
Certification Authority

C.
Certificate Templates

D.
Group Policy Management

Explanation:
http://technet.microsoft.com/en-us/library/cc771246.aspx
Re-Enroll All Certificate Holders
This procedure is used when a critical change is made to the certificate template and you
want all subjects that hold a certificate that is based on this template to re-enroll as quickly
as possible. The next time the subject verifies the version of the certificate against the
version of the template on the certification authority (CA), the subject will re-enroll.
Membership in Domain Admins or Enterprise Admins, or equivalent, is the minimum required
to complete this procedure. For more information, see Implement Role-Based
Administration.
To re-enroll all certificate holders
1. Open the Certificate Templates snap-in.
2. Right-click the template that you want to use, and then click Reenroll All Certificate
Holders.