You have an enterprise subordinate certification authority (CA).
You have a custom certificate templatethat has a key length of 1,024 bits.
The template is enabled for autoenrollment.
You increase the template key length to 2,048 bits.
You need to ensure that all current certificate holdersautomatically enroll for a certificate that uses the
new template.
Which consoleshould you use?

A.
Group Policy Management MMC Snap-In

B.
Certificates MMC Snap-In on the Certificate Authority

C.
Certificate Templates MMC Snap-In

D.
Certification Authority MMC Snap-In

Explanation:
Reference:
http://technet.microsoft.com/en-us/library/cc771246.aspx
Re-Enroll All Certificate Holders
This procedure is used when a critical change is made to the certificate template and you want all subjects that
hold a certificate that is based on this template to re-enroll as quickly as possible. The next time the subject
verifies the version of the certificate against theversion of the template on the certification authority (CA), the
subject will re-enroll.
Membership in Domain Admins or Enterprise Admins, or equivalent, is the minimum required to complete this
procedure. For more information, see Implement Role-Based Administration.
To re-enroll all certificate holders
1. Open the Certificate Templates snap-in.
2. Right-click the template that you want to use, and then click Reenroll All Certificate Holders.