It’s been a while and I made progress and observed multiple MDM platforms.
Most MDM clients does use this API to install certificates programmatically but it’s being activated from the MDM management platform, rather then the MDM DPC app itself.
So if my goal is to install certificate that is generated on device it cannot be done using the MDM DPC app (all least not using the MDM platforms I encountered).
However, I can still install certificate using the MDM management platform, usually for root CA certificates which are deployed on multiple devices, rather then per-device certificates.
CLICK HERE to find out more related problems solutions.