[stephenr]

I don't use an MDM server/service specifically, but I use a profile (built and installed via Apple Configurator 2 over USB) to install certificates+keys for S/MIME.

The nice part is I can use the same profile on a Mac too.