I set up CEP and CES-Kerberos on Windows server 2012 (CA installed on the same server).
Changed host part of URI on https://domain.internal/xxxCA_CES_Kerberos/service.svc/CES andhttps://domain.internal/ADPolicyProvider_CEP_Kerberos/service.svc/CEP from domain.internal to domain.public
Changed host part of msPKI-Enrollment-Servers attribute on "CN=xxxCA,CN=Enrollment Services,CN=Public Key Services,CN=Services,CN=Configuration,DC=domain,DC=internal"
When I am trying to enroll certificate using Enrollment Policy, all certificate templates available for enrollment listed properly, but im getting that message. There are no any spaces in CA name and enrollment Url:
https://domain.public/xxxCA_CES_Kerberos/service.svc/CES
Didn't find any useful hints in Event Log, please help to sort this out.