You are the network administrator for your company. The network consists of a single Active
Directory domain with five domain controllers that run Windows Server 2003, Enterprise Edition.
You are updating the public key infrastructure (PKI) for your company. Issuing Certification
Authorities (CAs) have been provided certificates with a validity period of five years. Certificates
are issued to enable network users to encrypt files on their computers. Basic EFS certificates have
been issued and have been configured with the default validity period. You want to configure all
new EFS certificates so that they are valid for up to three years.
What should you do? (Choose all that apply. Each correct answer presents part of the solution.)

A.
Duplicate and rename the Basic EFS certificate template.

B.
Open the Basic EFS certificate template Properties dialog box.

C.
Select the General tab and edit the validity period.

D.
Select the General tab and edit the renewal period.

E.
Select the Security tab and change the permission for the Administrators group to Enroll.