Hello,
you have changed the enrollURL to the fully qualified hostname vairant in the Secure Login Server administrator console, but there was maybe no update of the policy on the client.
Try to change the "enrollURL0" entry manually on the client in the registry HKEY_LOCAL_MACHINE\SOFTWARE\Policies\SAP\SecureLogin\profiles\<your profile name> and change here to "https://<server name>.LDAP-TEST.dom:50201/SecureLoginServer....
and try again.
best regards
Alexander Gimbel