> > I suspect I've hit a replication conflict... Just to close this off ... it was a replication issue - the certificates hadn't yet replicated... deleting from the server originally enrolled against it was fine. James