What should you do before you renew the certificate?

Your network contains an Active Directory domain named contoso.com. The domain contains a certification authority (CA).
The CA certificate was valid for five years and is about to expire.
You need to ensure that when you renew the CA certificate, the maximum Validity period for the certificate is 10 years.
What should you do before you renew the certificate?
A. From Microsoft XML Notepad, create a file named CAPolicy.xml in the C:WindowSystem32ADC folder.
B. From Windows System Image Manager, create a file named Unattend.xml. Store Unattend.xml in the C:WindowsSystem32Config folder.
C. From Windows Imaging and Configuration Designer, create a file named Unattend.ini. Store Unattend.ini in the C:WindowsPanther folder.
D. From Microsoft Notepad, create a file named CAPolicy.inf. Store CAPolicy.inf in the C:Windows folder.