Install the Intune certificate connector
You can install the Intune certificate connector on only the NDES server. You cannot install it on the server that hosts the CA.
In a web browser, go to https://intune.microsoft.com/ and log in by using an account that has both an Entra P1 or P2 license and an Intune license.
From the main page, go to Tenant Administration and select [ Connectors and Tokens ].
On the left toolbar at the bottom, locate and open [ Certificate Connectors ]. Select [ Add ].
In the Install the certificate connector pop-up window, select the [ Certificate Connector ] hyperlink to download.
On your NDES server, run the installer as Administrator. After it completes, select [ Open ].
On the Welcome page, select [ Next ].
On the Features page, select all options and select [ Next ].
On the Service Account page, select [ Domain account ] and enter the credentials for the domain administrator Service Account. Select [ Next ].
On the Proxy page, enter any proxy information if required. Otherwise, select [ Next ].
You do not need to enter any AAD Proxy information here.
On the Prerequisites page, select [ Next ].
When prompted, log in to Azure AD by using a Global Administrator account with an Intune license and an Entra ID P1 (or P2) license.
After you log in, the installer continues. After it finishes, select [ Exit ].
To verify that the certificate connector installed properly, go to https://intune.microsoft.com/ and log in using an account that has both an Entra P1 or P2 license and an Intune license.
From the main page, go to Tenant Administration and select [ Connectors and Tokens ].
You should see your connector listed with an Active status.
For more information on installing and configuring the Intune Certificate Connector, refer to the Microsoft documentation.