Removing and Reinstalling AD Cert Services

[mdrabble]

I have a bit of a strange issue where I have been going through PingCastle and I'm trying to sort Certificate enrollment so it is HTTPS.

 

Going through and trying to swap over the bindings to https and I'm getting an error about process already in use.

 

Also, when I look at the Certificate enrollments, PC enrollments havent taken place for the last year :consfused: as the expiry dates are 2021 - which is about the time I didnt an inplace updrade from 2012r2 to 2016.

 

Since I cant get iis to switch to https and enrollments are not taking place (even though GPOs are set - but works for VPN users )

 

Is it a massive No No to remove and reinstall ADCS?

 

I would have to re-issue certs for VPN and Radius BYOD clients but that isnt the end of the world (or is it??)

[mdrabble]

Also....looking at event viewer on the server, it is telling me there are some Certs missing or the directory replication may not be complete.

 

As it is a single CA server I dont think replication is the issue - which now leaves me scratching my head as to why it is telling me some Certs are missing