Create a user account (e.g. cfServiceCA) that will be used by the system to request user certificates from the Certification Authority (CA) and grant this account permissions to work with the CA:
1. Open the Certification Authority tool, select the CA and switch to its Properties.
2. Click Add in Security tab.
3. Specify the service account (cfServiceCA) as user.
4. Define Issue and Manage Certificates and Request Certificates permissions for the account and click ОК.
If you have more than one CA in your environment, the service account must be granted the same set of privileges for all CAs.
