Home » Microsoft » 70-640 » Which console should you use?
You have an enterprise subordinate certification authority (CA).
You have a custom certificate template that has a key length of 1,024 bits.
The template is enabled for autoenrollment.
You increase the template key length to 2,048 bits.
You need to ensure that all current certificate holders automatically enroll for a certificate that uses the new template.
Which console should you use?
A. Group Policy Management MMC Snap-In
B. Certificates MMC Snap-In on the Certificate Authority
C. Certificate Templates MMC Snap-In
D. Certification Authority MMC Snap-In
Correct Answer: C
Explanation/Reference:
Practically the same question as F/Q13.
Reference:
http://technet.microsoft.com/en-us/library/cc771246.aspx
Re-Enroll All Certificate Holders
This procedure is used when a critical change is made to the certificate template and you want all subjects that hold a certificate that is based on this template to re-enroll as quickly as possible. The next time the subject verifies the version of the certificate against the version of the template on the certification authority (CA), the subject will re-enroll.
Membership in Domain Admins or Enterprise Admins, or equivalent, is the minimum required to complete this procedure. For more information, see Implement Role-Based Administration.
To re-enroll all certificate holders
1. Open the Certificate Templates snap-in.
2. Right-click the template that you want to use, and then click Reenroll All Certificate Holders.