You have an Azure IoT hub that uses a Device Provisioning Service instance to automate the deployment of Azure IoT Edge devices. The IoT Edge devices have a Trusted Platform Module (TPM) 2.0 chip. From the Azure portal, you plan to add an individual enrollment to the Device Provisioning Service that will use the TPM of the IoT Edge devices as the attestation

mechanism. Which detail should you obtain before you can create the enrollment?

A. the scope ID and the Device Provisioning Service endpoint

B. the primary key of the Device Provisioning Service shared access policy and the global device endpoint

C. the X.509 device certificate and the certificate chain

D. the endorsement key and the registration ID