Overseeing the deployment and compliance of software updates across managed devices using Intune
In the context of Intune MDM, the renewal of the MDM CA certificate can occur automatically when mobile devices communicate with the Intune service. However, if mobile devices are wiped or fail to communicate with the Intune service for a certain period, the MDM certificate may not be renewed automatically. In such cases, you may need to manage the renewal process manually after the certificate expires.
To ensure continuous access to enterprise applications, it is recommended to set a renewal period a couple of months before the certificate expires and configure the device for automatic renewal if possible.
References: