You must configure all Windows domain and non-domain endpoints for which the Certificate Enrollment Gateway will issue certificates.