> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Install and bind the certificate on the NDES server

> Guide to install and bind a certificate on the NDES server for secure communication.

This section explores the following tasks:

* Install the NDES certificate.
* Bind the NDES certificate in IIS.
* Configure request filtering.
* Bind the certificate in the registry.

## Install the certificate

Perform the following steps to install the NDES certificate:

<Steps>
  <Step>
    On the NDES server, open the Windows search bar and look for `certlm.msc`. Open it.
  </Step>

  <Step>
    In the left toolbar, right-click **Personal** and select **All Tasks** > **Request New Certificate**.
  </Step>

  <Step>
    On the **Select Certificate Enrollment Policy** page, select **\[ Active Directory Enrollment Policy ]**. Select **\[ Next ]**.
  </Step>

  <Step>
    Select the **NDES** **certificate** created earlier, and select **\[ More information is required to enroll for this certificate. Click here to configure Settings ]**.
  </Step>

  <Step>
    On the **Certificate** **Properties** page, make the following changes:

    1. For **Subject** **Name**, select **\[ Common Name ]** and enter the **Fully Qualified Domain Name** of your NDES server. Then, select **\[ Add ]**.
    2. For **Alternate** **Name**, select **\[ DNS ]** and enter the **Fully** **Qualified** **Domain** **Name** of your NDES server. Then, select **\[ Add ]**.
  </Step>

  <Step>
    Select **\[ Apply ]** and then **\[ OK ]**. Then select **\[ Enroll ]**.
  </Step>
</Steps>

### Bind the certificate

Perform the following steps to bind the NDES certificate in IIS:

<Steps>
  <Step>
    On the NDES server, open the Windows search bar and look for **Internet Information Services (IIS) Manager**. Open it.
  </Step>

  <Step>
    Expand your **Server** **Name** > **Sites** and then select **\[ Default Web Site ]**.
  </Step>

  <Step>
    On the right side of the screen, locate **Edit** **Site** and select **\[ Bindings ]**.
  </Step>

  <Step>
    On the **Site** **Bindings** page, select **\[ Add ]**.
  </Step>

  <Step>
    Change the **Type** to **HTTPS** and select **\[ Select ]**. Select the NDES certificate you just installed and select **\[ OK ]**.
  </Step>
</Steps>

### Configure request filtering

Perform the following steps to configure request filtering in IIS:

<Steps>
  <Step>
    On the NDES server, open the Windows search bar and look for **Internet Information Services (IIS) Manager**. Open it.
  </Step>

  <Step>
    Expand your **Server** **Name** > **Sites** and then select **\[ Default Web Site ]**.
  </Step>

  <Step>
    Locate and select **\[ Request Filtering ]**.
  </Step>

  <Step>
    On the right side of the screen, locate and select **\[ Edit Feature Settings ]**.
  </Step>

  <Step>
    Change the **Max Url length** and **Max query string** values to `65534`. Select **\[ OK ]**.
  </Step>
</Steps>

### Bind the certificate

Perform the following steps to bind the certificate in the registry:

<Steps>
  <Step>
    On the NDES server, open the Windows search bar and look for **System Registry Editor**. Open it.
  </Step>

  <Step>
    Go to `Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MSCEP` and locate **GeneralPurposeTemplate**.
  </Step>

  <Step>
    Change the value to the **name** of your **certificate** **template** created for NDES. (Not the display name.)
  </Step>

  <Step>
    Close the registry editor and restart the NDES server.
  </Step>
</Steps>

For more information on configuring infrastructure for Intune, refer to the Microsoft documentation:

[**learn.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure**](https://learn.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure)