YourcompanyhasanActiveDirectorydomain.YouplantoinstalltheActiveDirectoryCertificateService
A.InstalltheADCSserverroleandconfigureitasanEnterpriseRootCA.
B.InstalltheADCSserverroleandconfigureitasaStandaloneCA.
C.RestrictenrollmentagentsfortheSmartcardlogoncertificatetotheAccountOperatorgroup.
D.RestrictcertificatemanagersfortheSmartcardlogoncertificatetotheAccountOperatorgroup.
E.CreateaSmartcardlogoncertificate.
F.CreateanEnrollmentAgentcertificate.