When using CA Gateway as the source of certificate information, run the evactl import-p12 command to import the PKCS #12 described in Generating the CA Gateway client certificate. For example:

$ sudo ./evactl import-p12 -f eva-cagw.p12