You need to design a certificate management process for internal users. What should you do？（）
- AEstablish a Web enrollment service for internal users to request access to resources
- BGrant Enrollment Agent rights to users
- CEstablish enrollment stations and store user certificates in a smart card
- DCreate Connection Manager scripts to identify the client computer operating system， and configure Web proxy settings to specify the appropriate Web enrollment service