The CA certificate is not downloaded in the User-Initiated Enrollment process.

[Yamashiro]

Hello,All.
In the following User-Initiated Enrollment procedure, it is supposed to install CA certificates and an MDM profile, but downloading of the CA certificate may not be done.
User-Initiated Enrollment Experience for Computers
> Enrollment Experience for macOS 10.13 or Later

Even if CA certificate download is not done, enrollment processing ends normally.
Is it OK not to download the CA certificate?

[mschroder]

@Yamashiro I know that the CA certificate is needed when you use separate storage servers that use a certificate from the JSS. In that configuration clients will not be able to contact the storage servers if they don't have the CA certificate installed. I don't know if the CA cert is needed in other cases.

[Yamashiro]

Thank you for your response. @mschroder I would continue to investigate.