Setting up bitlocker network unlock

I'm setting up bitlocker network unlock and on the wds server when a client sends a request I get two errors.

                          [WDSServer/WDSPXE/NKPPROV]NKP request processing failed while extracting key material. Remote address: ipaddress:68, Packet length: 573.

                          [WDSServer/WDSPXE/NKPPROV]Could not decrypt data with private key. HRESULT = 0x80090010.

                          Any ideas.  I verified on the client that the certificate is installed and the thumbprint matches what is installed on the wds server.