Forum Discussion
Connect a second NDES server to enterprise CA
Hi Julius, yes, multiple NDES servers can be used, but the duplicate endpoint error usually means something in the NDES, CEP, or CES registration is colliding with the existing configuration. I’d use a separate service account, confirm the SPNs are unique, verify the certificate templates and permissions, and make sure the second NDES server is not trying to register the exact same enrollment endpoint identity. The CA event logs are also worth checking closely because they usually point to the object or endpoint being treated as duplicate.
Good advice. I'd also check whether there's an existing CEP/CES or NDES registration that's conflicting with the new server. The "endpoint is a duplicate" error is often caused by a previously registered enrollment endpoint rather than a limitation of Enterprise CA itself.
Running multiple NDES servers against the same CA is a supported deployment for scalability and high availability, so I'd review the CA event logs, verify the service account and SPNs, and ensure the second server is registering with unique endpoint information. If this is an Intune migration, it's also worth confirming the NDES connector configuration isn't pointing to an existing registration.
Knowing whether the error occurs during NDES role configuration or CEP/CES registration would help narrow down the root cause.