Cannot process argument transformation on parameter 'EnrollmentPolicyServer'

[DanTheMan-NL]

When I use the example from the command Submit-CertificateRequest as displayed on page https://www.sysadmins.lv/projects/pspki/Submit-CertificateRequest.aspx I receive this error:

Submit-CertificateRequest : Cannot process argument transformation on parameter 'EnrollmentPolicyServer'. Cannot convert the "https://xxx/Test%20Issuing%20CA1_CES_Kerberos/service.svc/CES" value of
type "System.String" to type "PKI.Enrollment.Policy.PolicyServerClient".
At line:1 char:150
+ ... olicyServer "https://xxx/Test%2 ...
+                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidData: (:) [Submit-CertificateRequest], ParameterBindingArgumentTransformationException
    + FullyQualifiedErrorId : ParameterArgumentTransformationError,Submit-CertificateRequest

The commands I tried are:
Submit-CertificateRequest -CA $CA -Attribute "CertificateTemplate:TestWebServer(Offlinerequest)" -RawRequest $CSR -CEP "https://xxx/Test%20Issuing%20CA1_CES_Kerberos/service.svc/CES"
Submit-CertificateRequest -CA $CA -Attribute "CertificateTemplate:TestWebServer(Offlinerequest)" -RawRequest $CSR -CEP "https://xxx/ADPolicyProvider_CEP_Kerberos/service.svc/CEP" -Credential Get-Credential

Why doesn't it work?

[Crypt32]

If you specify -CA parameter, then you don't need to specify -CEP at all. The request can be submitted to CA directly. Try to remove -CEP parameter and value.

[DanTheMan-NL]

Yes, it works without the CEP parameter when I use a server in the same forest as where the CA is. But I also want to use PSPKI from a server in a different forest with a one-way trust.

The example also has the CA and CEP parameter combined.