Not Monitored
Tag not monitored by Microsoft.
40,943 questions
I have the same issue. Any progress ?
NDES Server role configuration - Failed to Enroll RA Certificate
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 41%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
Mahesh Aralelemath
386
Reputation points
Hi,
We are facing a strange issue while installing NDES Server role as " Failed to Enroll RA Certificates. RPC Server is un available".
All pre requisites are taken care like certificate templates have permission, Installation being carried out using Enterprise Admin account and Issuing CA is well within the same Network and no port restriction.
Appreciate any inputs or check points to fix the issue.
Regards
Mahesh
2 answers
Sort by: Most helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 95%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESB%3C/text%3E%3C/svg%3E)
Stig Bergene 6 Reputation points2021-06-29T07:15:17.58+00:00 -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(160, 21%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBC%3C/text%3E%3C/svg%3E)
Badenhorst, Chris 0 Reputation points2023-06-23T10:42:14.0966667+00:00 I did manage to get it working but seems to be a quick fix - by renewing the RA cert on the ndes server - as stated check the template permissions.
Sign in to comment -
-
Mahesh Aralelemath 386 Reputation points
2021-06-29T08:05:24.207+00:00 - Check the permission on certificate templates for "CEP Encryption" and "Exchange Enrollment Agent (Offline Request) and IPSec Template"
- on CA Server, Disable/Uncheck the Auditing for Start and Stop Active Directory Certificate Services -- This can be enabled back later once NDES role is done.
- Check the Service account permission
-
Badenhorst, Chris 0 Reputation points
2023-06-15T11:38:29.68+00:00 What should the permissions be set? Should you include the service account permissions to these templates and would it be read-only ?
-
Badenhorst, Chris 0 Reputation points
2023-06-23T10:39:56.88+00:00 Thanks - I notice that I had to renew the Exchange Enrollment Agent (offline) cert on the NDES server - this seems to happen quite often. Do have the correct permissions set on the template. Odd one
Sign in to comment