In the following User-Initiated Enrollment procedure, it is supposed to install CA certificates and an MDM profile, but downloading of the CA certificate may not be done.
User-Initiated Enrollment Experience for Computers
> Enrollment Experience for macOS 10.13 or Later
Even if CA certificate download is not done, enrollment processing ends normally.
Is it OK not to download the CA certificate?
@Yamashiro I know that the CA certificate is needed when you use separate storage servers that use a certificate from the JSS. In that configuration clients will not be able to contact the storage servers if they don't have the CA certificate installed. I don't know if the CA cert is needed in other cases.