To enable code signing with an existing PKI, the first step is to configure the Certificate Authority (CA) to issue code signing certificates. Adding a new template with attributes specific to code signing (e.g., key usage for signing) allows the CA to support this requirement without disrupting existing operations.
Option A:Correct-templates define certificate types; this isthe foundational step.
Option B:Wildcard certificates are for domains, not code signing.
Option C:Recalculating root CA keys is unnecessary and risky unless compromised.
Option D:SAN (Subject Alternative Name) is for multi-domain certificates, irrelevant here.