Which of these entities initializes the secure tunnel?

EAP-FAST provides a secure tunnel during Phase One to protect the user’s authentication credentials.
Which of these entities initializes the secure tunnel?

A.
x.509 certificate

B.
generic token card

C.
preshared key

D.
Protected Access Credential