Forum Discussion
Connect a second NDES server to enterprise CA
In preparation of the migration of our ~4500 MDM-devices from SCCM-Intune-Hybrid to Intune SA, I am trying to install a second NDES-server to be able to test and provide feature-parity before moving the first users.
Anyone has an idea how to do so?
Always get an error (during NDES setup wizard) stating, that the "endpoint is a duplicate".
The same error can be found on the CA in the eventlog, but in my opinion, it should be able to connect to a CA from two servers, even as I use different system-users and also created a new cert-template for this purpos.
Any thoughts on this are appreciated
Thanks in advance
Julius
2 Replies
Hi Julius, yes, multiple NDES servers can be used, but the duplicate endpoint error usually means something in the NDES, CEP, or CES registration is colliding with the existing configuration. I’d use a separate service account, confirm the SPNs are unique, verify the certificate templates and permissions, and make sure the second NDES server is not trying to register the exact same enrollment endpoint identity. The CA event logs are also worth checking closely because they usually point to the object or endpoint being treated as duplicate.
Good advice. I'd also check whether there's an existing CEP/CES or NDES registration that's conflicting with the new server. The "endpoint is a duplicate" error is often caused by a previously registered enrollment endpoint rather than a limitation of Enterprise CA itself.
Running multiple NDES servers against the same CA is a supported deployment for scalability and high availability, so I'd review the CA event logs, verify the service account and SPNs, and ensure the second server is registering with unique endpoint information. If this is an Intune migration, it's also worth confirming the NDES connector configuration isn't pointing to an existing registration.
Knowing whether the error occurs during NDES role configuration or CEP/CES registration would help narrow down the root cause.
