1. Go to - https://intune.microsoft.com/
2. Open "Devices"
3. Open  "Device onboarding"
4. Open  "Enrollment"
5. Click on the "Apple" Tab
6. Open  "Apple MDM Push Certificate"
7. Click on "Download your CSR"
8. Log into - https://identity.apple.com/
9. Locate - "Mobile Device Management  -  Microsoft Corporation" that is active or most recently revoked.  Click "Renew"
10. Click "Choose File" locate file downloaded in step 7
11. Click "Upload"
12. Download the certificate
13. Back in intune, go to step 4 and enter "itsupport@cyp.org.au"
14. Still in intune, go to step 5 and upload file downloaded in step 12
15. Click Upload
16. Done.