Configure prerequisites on the NDES server

To configure prerequisites on the NDES sever, you need to follow below steps:

  1. When NDES is added to the server, the wizard also installs IIS. Ensure IIS has the following configurations:
  • Web Server > Security > Request Filtering
  • 307

  • Web Server > Application Development > ASP.NET 3.5. Installing ASP.NET 3.5 will install .NET Framework 3.5. When installing .NET Framework 3.5, install both the core .NET Framework 3.5 feature and HTTP Activation.
  • 308

  • Web Server > Application Development > ASP.NET 4.5. Installing ASP.NET 4.5 will install .NET Framework 4.5. When installing .NET Framework 4.5, install the core .NET Framework 4.5 feature, ASP.NET 4.5, and the WCF Services > HTTP Activation feature.
  • 309

  • Management Tools > IIS 6 Management Compatibility > IIS 6 Metabase Compatibility
  • 310

  • Management Tools > IIS 6 Management Compatibility > IIS 6 WMI Compatibility
  • 311

  1. On the server, add the NDES service account as a member of the IIS_IUSR group.
  2. 312

  3. Run the following command to set the SPN of the NDES Service account: setspn -s http/<DNS name of NDES Server> <Domain name>\<NDES Service account name>
  4. 313

  5. On the server that will hosts NDES, you must log on as an Enterprise Administrator, and then use the Add Roles and Features Wizard to install NDES
  6. 314

  7. In the Wizard, select Active Directory Certificate Services to gain access to the AD CS Role Services.
  8. 315

  9. Select the Network Device Enrollment Service, uncheck Certification Authority, and then complete the wizard.
  10. 316

  11. On the Installation progress page of the wizard, do not click Close. Instead, click the link for Configure Active Directory Certificate Services on the destination server.
  12. 317

  13. NDES Configuration windows will open
  14. 318

Advertisements
This entry was posted in Microsoft Intune. Bookmark the permalink.

One Response to Configure prerequisites on the NDES server

  1. Pingback: Enable access to company resources using Certificate profiles | Mai Ali's Technical Blog

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s