However, if SCEP certificate deployment fails after you renew the certificate of any root ... According to Microsoft, you need to reinstall both the NDES server role and Microsoft Intune Connector ...