World of EUC

New root cert from the new CA deployed to the endpoints?

The root cert didnt change - the database was migrated to a new server - the old one was decomissioned once the database was exported

Perhaps you need to reauthorize? <https://docs.citrix.com/en-us/federated-authentication-service/current-release/config-manage/ca-configuration.html#renew-registration-authority-certificates|https://docs.citrix.com/en-us/federated-authentication-service/current-release/config-manage/ca-configuration.html#renew-registrat[…]ty-certificates>

The domain controllers were missing the KDC Authentication in the computer certs...once they were redeployed everything worked as expected