A. Revoke the certificate of the old device, delete all metadata, and onboard the new device.
B. Block access to the old device, revoke its certificate, and issue a new certificate to the new device.
C. Delete the user account, create a new account for the user, and onboard the new device.