You have a single Active Directory directory service domain. You have a certification authority (CA) that runs on Windows Server 2003. Your company requires users to log on to their portable computers with two-factor authentication. You need to prepare your CA for two-factor authentication. Which certificate template should you publish on the CA?