You need to ensure that the certificate used to encrypt data can be accessed by the cloud service application