You need an enrollment agent certificate in order to sign a certificate request on behalf of other users. Click Browse to ...