You can configure Jamf Pro to automatically redistribute ACME certificates to computers and mobile devices at a specified number of days before the certificates expire, eliminating the need for you to monitor and redistribute certificates manually. To support this function, a $PROFILE_IDENTIFIER variable is automatically inserted into the Subject of the issued certificate as an organizational unit (OU). Your ACME certificate authority template must also support the inclusion of an OU value to support this functionality.
To enable automatic certificate redistribution, navigate to the configuration profile that contains the ACME Certificate payload and select a number of days from the Redistribute Profile pop-up menu.