This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 91%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVC%3C/text%3E%3C/svg%3E)
In Microsoft PKI while configuring the CEP and CES we are able to choose only one option for authentication. The options available are 1) Computer Integrated Authentication(Kerberos) 2) Client Certificate Authentication 3) Username and Password. How is it possible to choose both Computer Integrated Authentication(Kerberos) and Username&Password options. Any help in this regard is appreciated. Thank you.
Additional CES instances (though, not CEP) are installed using PowerShell: Install-AdcsEnrollmentWebService. Make sure that all instances of CES application run under same account, otherwise it will fail due to SPN collision.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi，
Was the information provided by Crypt32 was helpful?
If there are any progress, please let us know.
Best Regards,
Thank you @Vadims Podāns The link you have shared was helpful. The documentation needs to be updated as I was getting error while performing the 2nd CES instance saying "You cannot set this property because the application pool "WSEnrollmentServer" already exists"
I was finally able to get the second CES instance installed when i omitted "-ServiceAccountName" and "-ServiceAccountPassword" then updating the AppPool identity in IIS to use the service account
Note : We can create multiple instances of CEP also.
@Anonymous FYI
Good to hear that you have solved this issue.
In addition, thanks for sharing your solution here as it would be helpful to anyone who encounters similar issues.
You may accept the information provided by Cypt32 that was helpful as answer to end this thread.
Best Regards,
Hi，
Actually, i tried to install the Certificate Enrollment Web Service (CES) and Certificate Enrollment Policy Web Service (CEP) in my lab too.
Didn't find a way to select the two options (Computer Integrated Authentication (Kerberos) and Username Password) at the same time.
Best Regards,
@Anonymous Thank you for the response. I'm not sure how its possible to achieve but looking at the above snapshot says its possible but don't know how?
