[Story] [RM] Eeli wants to enroll MDM'd devices

User story

Admin-käyttäjänä Eeli haluan,

että voin liittää RM:iin laitteita, jotka ovat MDM-hallittuja,

jotta voin käyttää organisaationi tarjoamia laitteita sotahommiin.

Acceptance Criteria

• We got how-to use RM with MDM'd devices so that users with no technical background can do it

Adjacents:

• Story on mass enrolling by Eeli themselves

Notes So Far:

• MDM blocks installing certificates from CAs they are not set to trust, by default.
• The practical action to do is to make the MDM trust the RM CA in question:
• • get the CA chain from eg. https://server/ca/public/ca_chain.pem
• • drop that to each managed phone / make the MDM to trust the ca
• Got to consider how we do this. In perfect world, this would be a feature of a MDM service that would as fulfill the adjacent user story XX. In reality this probably don't happen that soon.
• The MDM operator might be bureucratically very far from the unit that actually wants to use RM with their managed phones. So making any changes in the device management is quite difficult. It either must be SUPER easy or we need a workaround (difficult to see what would be such).

No files or tests are named. Start by reviewing the issue notes and the CA chain endpoint, then determine a practical way for MDM operators to trust the RM CA. Done means a clear how-to for users with no technical background, including the required device-management steps or an agreed workaround.