Why do users need to install CA Cert with Email Enrollment?

[rlowry]

When I send a user an email enrollment, they get the following message:

To continue with enrollment, you need the CA certificate for your organization.

I've been working with jamf for a while at other organizations and never had to do this before. I've only had to install the MDM profile.

Is there a setting or a reason for this? I think some things are misconfigured but I can't seem to find the settings. Or maybe something changed in the last few months and this is now normal.

Note: not sure if it matters but we are using the hosted Jamf cloud.

[talkingmoose]

In your Jamf Cloud server navigate to Settings > Global Management > User-Initiated Enrollment and select "Skip certificate installation during enrollment". With Jamf Cloud, your SSL certificate should already be trusted using one of the root CA certs already installed on your devices.

[bmortens115]

typically you do not need it if you are cloud hosted or if you have a trusted SSL cert. You can disable on the jamf pro server under Settings > user-initiated enrollment > click "Skip certificate installation during enrollment"

That should do the trick, but test to make sure that this doesn't break anything.

[rlowry]

Thanks, this was most likely it.