Cannot find KMS CA certificate required to construct the EPF file. Enroll a client in the same KMS and use Outlook to save ...

Cannot find KMS CA certificate required to construct the EPF file.
Enroll a client in the same KMS and use Outlook to save the user keys
to an EPF file.  Take the EPF file to the current machine and use certutil
to dump the EPF file.  This will import the needed KMS CA certificates into
the local machine cert store, making them available to construct new EPF files.