I done it by "hand" on Mac]
Created profile in Apple Configurator 2 & installed it
I already had Root CA & Enterprise CA certificates imported & trusted
So the profile only had user certificate (pfx issued by Enterprise CA) and VPN server certificate (also issued by Enterprise CA)
As explained already in linked above:
No matter what I do on my workstation, I only get
C:\WINDOWS\system32>w32tm /query /source
Local CMOS Clock
C:\WINDOWS\system32>w32tm /resync /rediscover
Sending resync command to local computer
The computer did not resync because no time data was available.
Yet this one shows fine:
C:\WINDOWS\system32>w32tm /stripchart /computer:10.10.5.10 /samples:5 /dataonly
Tracking 10.10.5.10 [10.10.5.10:123].
Collecting 5 samples.
The current time is 21/04/2022 12:04:22.
12:04:22, +00.0106352s
12:04:24, +00.0104471s
12:04:26, +00.0102856s
12:04:28, +00.0100122s
12:04:30, +00.0055144s
Interesting observation here: https://serverfault.com/questions/894235/w2016-dc-cannot-sync-time-with-external-source
but switch to which I am connected (HP 2920) does not have such options
Seb