Your network contains an Active Directory domain. The relevant servers in the domain are configured  as shown in the following table.  You need to ensure that all device certificate requests use the MD5 hash algorithm.  What should you do（）

• A、On Server2， run the Certutil tool.
• B、On Server1， update the CEP Encryption certificate template.
• C、On Server1， update the Exchange Enrollment Agent （Offline Request） template.
• D、On  Server3，  set  the  value of the  HKLM/Software/Microsoft/Cryptography/MSCEP/  HashAlgorithm/HashAlgorithm registry key.