Hi there Jason - thanks for getting back to me.
The CSP DDF file would suggest there are additional OMA strings required, eg;
<Node> <NodeName>EncodedCertificate</NodeName> <DFProperties> <AccessType> <Add /> <Get /> <Replace /> </AccessType> <Description>Specifies the X.509 certificate as a Base64-encoded string. The Base-64 string value cannot include extra formatting characters such as embedded linefeeds, etc.</Description> <DFFormat> <b64 /> </DFFormat> <Occurrence> <One /> </Occurrence> <Scope> <Dynamic /> </Scope> <CaseSense> <CIS /> </CaseSense> <DFType> <DDFName></DDFName> </DFType> </DFProperties> </Node>
https://docs.microsoft.com/en-us/windows/client-management/mdm/rootcacertificates-ddf-file
Is it worth looking at expanding the string out using the DDF?
Thanks,
Shane.