http://blogs.technet.com/b/instan/archive/2012/10/27/installing-ndes-restarts-certsvc-service-on-target-ca-server.aspxDuring the installation of NDES, two certificate templates (&ldquo;Exchange Enrollment Agent (Offline request)&rdquo; and &ldquo;CEP Encryption&rdquo;) are added to the list of templates that the target CA is allowed to issue certificates from. The registryen-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.technet.com/b/instan/archive/2012/10/27/installing-ndes-restarts-certsvc-service-on-target-ca-server.aspx#3557767Mon, 11 Mar 2013 10:43:38 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3557767Anon<p>Also a problem with certain HSM configs.</p> <div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3557767" width="1" height="1">http://blogs.technet.com/b/instan/archive/2012/10/27/installing-ndes-restarts-certsvc-service-on-target-ca-server.aspx#3540406Wed, 12 Dec 2012 14:24:04 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3540406Ingolfur Arnar Stangeland<p>yeah, good point</p> <div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3540406" width="1" height="1">http://blogs.technet.com/b/instan/archive/2012/10/27/installing-ndes-restarts-certsvc-service-on-target-ca-server.aspx#3540405Wed, 12 Dec 2012 14:14:31 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3540405MR<p>Also can be problematic if you cluster the target CAs...</p> <div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3540405" width="1" height="1">