How migrate NDES Intune Serveur Rôle Migration Windows 2012R2 to 2019?

Question

Hi everybody,

My customer has one NDES Server in Windows 2012R2.
The goal is to migrate the NDES server 2012R2 to 2019 in Azure.
No documentation really exists actually for the migration.

Do you have any information or documentation for this subject ?

This NDES server uses Intune. The root CA offline and 2 sub CA are prevented from migrating in Azure.

Thx for your responses !

Answer 1

I have done a lot of research but haven’t found such migrate/upgrade document. For migration, we may need to remove and re-install the NDES service, then configure the NDES service, install and bind certificates on the server that hosts NDES and install the Microsoft Intune Connector with the following guide.

https://learn.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure#set-up-ndes
https://social.technet.microsoft.com/wiki/contents/articles/9063.active-directory-certificate-services-ad-cs-network-device-enrollment-service-ndes.aspx#Upgrade

Also, if you make configuration changes for NDES or to the certificate templates that are used by NDES, you must stop and restart NDES, IIS and the CA service.

Answer 2

Hi,

Thx for your response.

Do you have any idea with impact for this migration on devices that use NDES certificates ?