NDES Server - works with "localhost", but fails to authenticate with FQDN

Ward Verduyn 0 Reputation points
2025-05-13T07:59:18.3+00:00

It's the first time I'm setting up a CA in combination with NDES.

I am trying to set up SCEP in JAMF. I've checked the security settings on the template and made sure the template I want to use is in the MSCEP registry entry on the NDES server.

I've set up my CA and NDES servers, and everything seems to be going well. I'm able to authenticate to https://localhost/certsrv/mscep_admin and obtain the thumbprint and code for SCEP set up, however, whenever I access the mscep_admin site through the Entra Private Connector App, I also get the login window, but when I enter my credentials, it just shows the login window again, each time. I've checked the credentials, and I'm 100% sure they are correct.

I got a little further now, on the server itself, when accessing it through FQDN, it seems to work now, but only on Firefox, so not on Edge, there I also get the login window each time.

I've run Microsoft's NDES configuration validation script, as well. Everything's come back working, except for Intune specific things (such as NDESPolicy module registry entry).

Has anyone here run into this before, or can just offer some insight?

Windows for business | Windows Server | Directory services | Certificates and public key infrastructure (PKI)
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.