You have two servers named Server1 and Server2. Both servers run Windows Server 2008 R2. Server1 is configured as an Enterprise Root certification authority (CA). You install the Online Responder role service on Server2. You need to configure Server2 to issue certificate revocation lists (CRLs) for the enterprise root CA. Which two tasks should you perform? (Each correct answer presents part of the solution. Choose two.)
A.
Import the enterprise root CA certificate.
B.
Import the OCSP Response Signing certificate.
C.
Add the Server1 computer account to the CertPublishers group.
D.
Set the Startup Type of the Certificate Propagation service to Automatic.