If you are using AD certificates inside a configuration profile, here is the easiest way to make it auto renewal: sudo defaults write /Library/Preferences/com.apple.mdmclient AutoRenewCertificatesEnabled -bool YES I have setup an extension attribute to check the Macs need this remediation: #! /bin/bash status=$(sudo defaults read /Library/Preferences/com.apple.mdmclient AutoRenewCertificatesEnabled) echo “<result>$status</result>” Any Macs without the result […]