IPA: Profile KDCs_PKINIT_Certs Not Found

Issue

• Enabling PKINIT giving following error.

# ipa-pkinit-manage enable
Configuring Kerberos KDC (krb5kdc)
  [1/1]: installing X509 Certificate for PKINIT
PKINIT certificate request failed: Certificate issuance failed (CA_REJECTED: Server at "https://idmserver.example.com:8443/ca/ee/ca/profileSubmitSSLClient" replied: Profile KDCs_PKINIT_Certs Not Found)
Failed to configure PKINIT
Full PKINIT configuration did not succeed
The setup will only install bits essential to the server functionality
You can enable PKINIT after the setup completed using 'ipa-pkinit-manage'
Done configuring Kerberos KDC (krb5kdc).
The ipa-pkinit-manage command was successful