Hello,
These error events can be alarming at first glance, but in many cases they’re merely Windows reporting that it tried to enroll a certificate via the Simple Certificate Enrollment Protocol (SCEP) and couldn’t reach the endpoint.
Your event viewer errors mean that the PC (as both the WORKGROUP\ANDREW$ account and Local System) attempted to reach a SCEP enrollment URL that isn’t found (404). This is usually due to misconfigured or unnecessary certificate auto-enrollment settings. If you’re not experiencing other issues and your certificate-based features (VPN, Wi-Fi, etc.) work fine, you may safely ignore these events. If you’d prefer not to see these errors, review and disable any unwanted certificate auto-enrollment settings via Group Policy or MDM, and check the registry if needed.
If the Answer is helpful, please click "Accept Answer" and upvote it.