Your network contains an Active Directory domain named contoso.com. Contoso.com contains three servers.The servers are configure as shown in the following table.

Server name Server Role Service
Server1 Certification authority (CA)
Server2 Certificate Enrollment Web Service
Server3 Certificate Enrollment Policy Web Service

You need to ensure that users can manually enroll and renew their certificates by using the Certificate Enrollment Web Service.

Which two actions should you perform? (Each corrent answer presents part of the solution. Choose two).

A.
Configure the policy module setting.

B.
Configure the issuance requeriments for the certificate templates.

C.
Configure the Certificate Services Client – Certificate Enrollment Policy Group Policy setting.

D.
Configure the delegation setting for the Certification Enrollment Web Service application pool account.