Intune – Android 11 can no longer install trusted root certificate

This is a breaking change introduced by Android 11 when a device is being enroll as Android device administrator.

Android 11 can no longer install trusted root certificate on the device – this does not affect Samsung devices.

If you are using non Samsung devices enrolled as Android device administrator you will need to manually install the trusted root certificate.
Failure to install the trusted root certificate will ended to break SCEP certificate profile.