To set up Itune or MDM auto-enrollment, you need a Registration Authority (RA) certificate.

• Issuing this certificate requires one PKIaaS certificate license.
• Renewing this certificate requires an unused PKIaaS certificate in the inventory – to issue the new certificate before revoking the old one. The license of the revoked certificate returns to the inventory within half an hour of the revocation.