Description:

Certification Authority error occurs when attempting to issue a smart card:

Solution:

1. Open the Certificates (Local computer) Snap-in via MMC application.
2. Switch to Personal certificates storage and find the service account Enrollment agent certificate.
3. Then switch to private key management of the certificate (context menu ->All tasks->Manage Private Keys...)
4. Add a service account to use with target Microsoft CA and grant Full access rights to it:
   
5. Press Apply and then OK.