Intune lab - certificate deployment pending

I've set up an Intune lab with a single device (win10 enterprise). i have the Enterprise Mobility + Security E3 license assigned to my user.

I am trying to deploy a root certificate using the 'trusted certificate' admin template under configuration policies.  However, the profile assignment does not show the assignment not even pending however when I click on the profile assignment status it shows my device as pending.  It never changes from this state.

I know my device is contactable as I can reboot it from the Intune console.

Any suggestions as to why it would remain in Pending state?