You need to ensure that the encryption keys for e-mail certificates can be recovered from the CA database
You need to ensure that users in the human resources department can search for employees by using the employeeNumber attribute
You need to ensure that all of the client computers automatically receive certificates based on Template1