Banks, credit unions, insurance companies,
Automatic user enrollment failed: The certificate authority is invalid or incorrect
On the startup, the enrollment wizard does not start and returns the following error:
"Automatic user enrollment failed: The certificate authority is invalid or incorrect (Error code: 12045)"
This issue occurs when you use a self-signed SSL certificate for the Self-Service portal.
To resolve the issue, either obtain a signed third-party SSL certificate, or deploy the self-signed certificate to root CA (certificate authority) of all problematic workstations.
To deploy a self-signed certificate
Also, make sure that the name of the server stored in the certificate matches the name you specified on the Password Manager client setup.
More screenshots here Deploying a Self-Signed Root Certificate with Group Policy