Configuring auto-enrollment
To set up Itune or MDM auto-enrollment, you need a Registration Authority (RA) certificate.
Issuing this certificate requires one PKIaaS certificate license.
Renewing this certificate requires an unused PKIaaS certificate in the inventory – to issue the new certificate before revoking the old one. The license of the revoked certificate returns to the inventory within half an hour of the revocation.