iDrac Certificate Autoenrollment

Hi, I have a problem with SCEP autoenrollment. If I try it enrollment status is "Error" in log I see "CA_REJECTED, Transaction either is not permitted or is not supported by server". In certification authority log I found that public key doesn't match requirements. In request there is 2048 bit key. But in iDrac settings there is 4096 bit. I checked this by racadm cli.

If I generate CSR in the web GUI, then public key is 4096 bit.

Where could be a problem? Thanks.