This seems to be incorrect information. For "The CRMAppPool account and the Microsoft Dynamics CRM encryption certificate:" Step 3 has no "manage private keys"