Azure MFA NPS module - access denied when generating certificate

Hi,

We have an NPS server with the MFA NPS module running perfectly, to avoid a single point of failure I have built a second NPS server however the MFA NPS module fails to process any MFA requests.

When executing the New-AzureMfaTenantCertificate command I am presented with an "access is denied" message.  The Powershell session is "run as administrator" and the account logging into MSOnline is a global admin and also the account used to configure this on the first (working) server.