powershell-intune-samples icon indicating copy to clipboard operation
powershell-intune-samples copied to clipboard

Published 20 hours ago • verified publisher icon microsoftgraph

ValidateNDESConfiguration.PS1 does not support the latest Intune Certificate Connector

Open jonathan-gaudreau opened this issue 4 years ago • 7 comments

Hi, I'm not sure if it's the right place to mention it but today I had to install the latest certificate Connector (https://go.microsoft.com/fwlink/?linkid=2168535) after having issues with an older version and I realize that when running the validateNDESConfiguration.ps1, it gaves me a bunch of errors even though it's working fine

These are the errors that I get:

1- Checking Client certificate (NDES Policy module) is valid for use... Get-ItemProperty : Impossible de trouver le chemin d'accès « HKLM:\SOFTWARE\Microsoft\Cryptography\MSCEP\Modules\NDESPolicy», car il n'existe pas. This path exists in the registry

2- Checking Intune Connector is installed... Error: Intune Connector not installed

Is it possible to update the script so It can verify the latest plugin ?

jonathan-gaudreau avatar Sep 29 '21 17:09 jonathan-gaudreau

I also see these errors after the update of the Intune connector

gerrynicol avatar Oct 20 '21 08:10 gerrynicol

Me too. Trying to troubleshoot this new connector since it's completely broken our previously functional Intune certificate service.

mcnaugha avatar Oct 27 '21 15:10 mcnaugha

I had the same issue, please update the script.

maykonrds avatar Nov 25 '21 16:11 maykonrds

same issue.

solution: find line 1360, change the product name near the end to: "Certificate Connector for Microsoft Intune"

results: Checking Intune Connector is installed...

Success: Certificate Connector for Microsoft Intune was installed on 20220314 and is version 6.2202.38.0

Paul-Spagnola-Work avatar Mar 14 '22 21:03 Paul-Spagnola-Work

1395-1397 $KeyRecoveryAgentCertificate = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MicrosoftIntune\PFXCertificateConnector\KeyRecoveryAgentCertificate" $PfxSigningCertificate = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MicrosoftIntune\PFXCertificateConnector\PfxSigningCertificate" $SigningCertificate = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MicrosoftIntune\PFXCertificateConnector\SigningCertificate" 1409, 1441, 1472 There's more lines need fixing.

microbroke avatar Nov 10 '22 13:11 microbroke

Please update the script to fix this and also GMSA account usage

celeroncool avatar Nov 06 '23 10:11 celeroncool

Any updates on this one?

celeroncool avatar Apr 17 '25 09:04 celeroncool