NDES services will not install

Question

Failed to add the following certificate templates to the enterprise Active Directory Certificate Services or update security settings on those templates:
EnrollmentAgentOffline
CEPEncryption
IPSEC (Offline Request)
Element not found. 0x80070490 (WIN32:1168)

We have a root ca and issuing ca, I can see these templates are present in the certificate template store on the issuing server.
I have added the service account on those templates from the certemplate - manage and adding read permissions to those three.

the issuing ca server also has permissions for this service account under CA - Manage - security - for read / manage / request certifications

The service account is apart of local admins and is a enterprise admin and in iis_users.

Please you please advise.