Failure: The AMT Proxy Manager failed to apply certificate for "%1" from CA at "%2" with error CR_DISP_DENIED: (CERTSRV_E_ENROLL_DENIED(0x80094011L) ...

%11Failure: The AMT Proxy Manager failed to apply certificate for "%1" from CA at "%2" with error CR_DISP_DENIED: (CERTSRV_E_ENROLL_DENIED(0x80094011L) : The permissions on this certification authority do not allow the current user to enroll for certificates.)%12

Possible cause: This condition may occur when the site server does not have permission to apply the requested certificate from the certification authority to the out of band management controller.
Possible Cause: This condition may occur if the network connectivity is intermittent or failed during the attempt to update the out of band management controller with the requested certificate.
Solution: Verify that the account used by SMS_EXECUTIVE service has permission to update the out of band management controller.  For Intel AMT devices, the required permission (realm) is "PT Administer".   Additionally, ensure that the network connection between the certification authority, the site server and the out of band management device is operational and required infrastructure components are accessilbe during the update.%0