Fixed anonymous enrollment bug
a new key pair has been generated twice, so the selfsignt cert didn't match the signature.