Which three prerequisites must be satisfied before completing the task?

An administrator has been tasked with enabling encryption for existing virtual machines on a vSAN cluster.
Which three prerequisites must be satisfied before completing the task? (Choose three.)
A. Create an encryption storage policy
B. Enable Data-In-Transit encryption first
C. Enable that the virtual machines are powered on
D. Verify if a role with privilege “Cryptographic operations.Encrypt new” is assigned
E. Verify if a role with privilege “Cryptographic operations.Migrate” is assigned
F. Establish a trusted connection with the KMS