This message was deleted.

ADBA might be easier, the devices have to contact the domain every 180 days but maybe that’s sufficient for your deployment