Cannot find KMS CA certificate required to construct the EPF file. Enroll a client in the same KMS and use Outlook to save ...

Cannot find KMS CA certificate required to construct the EPF file. Enroll a client in the same KMS and use Outlook to save the user keys to an EPF file.  Take the EPF file to the current machine and use certutil to dump the EPF file.  This will import the needed KMS CA certificates into the local machine cert store, making them available to construct new EPF files.