NDES Enrollment Issue - PasswordMax reg key being ignored. Suggestions?

Hi all,

we have the NDES service configured on our CA server to dishout certs to iPads.  Everything works fine EXCEPT the PasswordMax value.  By default, this is 5.  I have changed the value to 100 but this value is being ignored.  The system is still using the default 5.  As a result, I have to do IISRESETS when the support staff try to issue certs to more than 5 iPad within an hour.  In addition, I have updated the PasswordValidity value as well to chagne how long a password is valid for but that's also still using the default value of 60.  The odd thing is that there is the registry entry SignatureTemplate which I can change to use a different template and that is getting read correctly.

Any suggetsions why these two PasswordMax and PasswordValidity values would be getting ignored?

Thanks!