Hi LFC,
UEM won't do this just by itself, but this is the behaviour you'd get if you enable the Certificate Support for Mandatory Profiles policy setting. Is that setting enabled in your customer's environment?
