Yesterday I
ran into a problem in my demo environment after I changed the AD FS service
communications certificate. My old certificate wasn’t prepared for DRS (Device
Registration Service) and since I wanted to test some things with DRS in
combination with Office 365 I needed to replace the certificate with a new one
which included the enterpriseregistration.domain.com UPN suffix.