User story

Admin-käyttäjänä Eeli haluan,

että voin liittää RM:iin laitteita, jotka ovat MDM-hallittuja,

jotta voin käyttää organisaationi tarjoamia laitteita sotahommiin.

Acceptance Criteria

[ ] We got how-to use RM with MDM'd devices so that users with no technical background can do it

MDM blocks installing certificates from CAs they are not set to trust, by default.
The practical action to do is to make the MDM trust the RM CA in question:
- get the CA chain from eg. https://server/ca/public/ca_chain.pem
- drop that to each managed phone / make the MDM to trust the ca
Got to consider how we do this. In perfect world, this would be a feature of a MDM service that would as fulfill the adjacent user story XX. In reality this probably don't happen that soon.
The MDM operator might be bureucratically very far from the unit that actually wants to use RM with their managed phones. So making any changes in the device management is quite difficult. It either must be SUPER easy or we need a workaround (difficult to see what would be such).