permission required for pfx enrollment using APIs

[La-LaS]

Hello,

getting the below error when trying to enroll a pfx using APIs. I want to know what permissions are needed for pfx creation? i am using a domain account. Can you please help? Thanks.

{
  "ErrorCode": "0xA0140002",
  "Message": "Either enrollment pattern 'Server_Auth_Web_Server_AD_Enroll (Server_Auth_Web_Server_AD_Enroll-xyz.abcd.com)' is not configured for enrollment type 'PFX_ENROLLMENT', or user 'NA\\la_la' does not have permissions to use this pattern for enrollment."
}

[netmackan]

This does not look like it is an error message from SignServer.

Can you give some more details about the command you are trying to run?