TB37148 describes how to create a Certificate Signing Request (CSR) through the menus on the phone screen.
How can this process be automated? Can the provisioning server send a directive to the phone telling it to create a new keypair and post a CSR and wait for a new certificate?
It would also be really handy if the CN was automatically filled out with the MAC address of the phone so the user doesn't have to type it on each phone.