Regarding machine certificate authentication, which two statements are true? (Choose two.)

A.
The domain workstation logon certificate must be issued by the domain certificate authority.

B.
The certificate must be self-signed by the Junos Pulse Access Control Service.

C.
The root certificate (CA) must be in the Machine Trusted Certificate store.

D.
The machine authentication license must be installed for Junos Pulse.

Explanation: