cPanel Service Certificates won't install because the administrator disabled this functionality

Symptoms

When running the checkallsslcerts script, you receive a message similar to the following.

The system will not attempt to replace the certificate for the “ftp” service with a signed certificate from the cPanel Store because the administrator disabled this functionality

Description 

It is possible to disable the function that allows cPanel to order a new hostname certificate through touch files.

Workaround

Run the following commands delete the touch files and re-enable the function that allows cPanel to order and install hostname certificates.

/bin/rm /var/cpanel/ssl/disable_auto_hostname_certificate

/bin/rm /var/cpanel/ssl/disable_service_certificate_management

Additional resources

The checkallsslcerts Script: Disable a cPanel-signed hostname certificate