Your company has an Active Directory domain. You install an Enterprise Root certification authority （CA） on a member server named Server1. You need to ensure that only the Security Manager is authorized to revoke certificates that are supplied by Server1. What should you do（）
- ARemove the Request Certificates permission from the Domain Users group.
- BRemove the Request Certificated permission from the Authenticated Users group.
- CAssign the Allow - Manage CA permission toonly the Security Manager user Account.
- DAssign the Allow - Issue and Manage Certificates permission to only the Security Manger user account