Encryption Management Server cannot look up user certificates stored in Active Directory