diff --git a/test/powershell/Modules/Microsoft.PowerShell.Security/CmsMessage.Tests.ps1 b/test/powershell/Modules/Microsoft.PowerShell.Security/CmsMessage.Tests.ps1
index e2fb9ddb80..3af66cfa39 100644
--- a/test/powershell/Modules/Microsoft.PowerShell.Security/CmsMessage.Tests.ps1
+++ b/test/powershell/Modules/Microsoft.PowerShell.Security/CmsMessage.Tests.ps1
@@ -312,7 +312,8 @@ Describe "CmsMessage cmdlets thorough tests" -Tags "Feature" {
         $processed.Message | Should Be $expected
     }
 
-    It "Verify -DocumentEncryptionCert parameter works" {
+    # Pending due to #3847
+    It "Verify -DocumentEncryptionCert parameter works" -Pending {
         $foundCerts = Get-ChildItem Cert:\CurrentUser -Recurse -DocumentEncryptionCert
 
         # Validate they all match the EKU