How to renew NDES service certificates for usage with Microsoft Intune – MSEndpointMgr
TLDR
Renew – Key exchange certificate
Renew – NDES Server Certificate
Set Private Keys to NDES Service
Renew – Enrollment agent certificate via the Inf file on the above website