Your network contains an Active Directory forest. All domain controllers run Windows Server  2008 Standard. The functional level of the domain is Windows Server 2003. You have a  certification authority （CA）.  
The relevant servers in the domain are configured as shown in the following table：    
Server name  Operating system  Server role  
Server1  Windows Server 2003  Enterprise root CA  Server2  Windows Server 2008  Enterprise subordinate CA  Server3  Windows Server 2008 R2  Web Server  
You need to ensure that you can install the Active Directory Certificate Services （AD CS）  Certificate Enrollment Web Service on the network.    
What should you do（）

You have an enterprise subordinate certification authority （CA）. You have a custom certificate  template that has a key length of 1，024 bits. The template is enabled for autoenrollment.    
You increase the template key length to 2，048 bits.  
You need to ensure that all current certificate holders automatically enroll for a certificate that  uses the new template.    
Which console should you use（）