You need to install an enterprise subordinate certification authority (CA) that supports private key archival

Your network contains an Active Directory domain named contoso.com. Contoso.com contains a member server that runs Windows Server 2008 Standard. You need to install an enterprise subordinate certification authority (CA) that supports private key archival. You must achieve this goal by using the minimum amount of administrative effort. What should you do first?

A.
Initialize the Trusted Platform Module (TPM).

B.
Upgrade the member server to Windows Server 2008 R2 Standard.

C.
Install the Certificate Enrollment Policy Web Service role service on the member server.

D.
Run the Security Configuration Wizard (SCW) and select the Active Directory Certificate Services – Certification Authority server role template check box.