Which two actions should you perform?

Your network contains an Active Directory domain. All client computers run Windows 10 Enterprise.
Your company uses virtual smart cards.
A user named User1 requires a virtual smart card on a new client computer named Computer1.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A.
Run the tpmvscmgr.exe command.

B.
Enroll Computer1 for a certificate.

C.
Run the Enable-BitLocker cmdlet.

D.
Enroll User1 for a certificate.