That extra step is only required when you deploy the certificates through one of the less secure methods: > You must manually turn on trust for SSL/TLS when yo

That extra step is only required when you deploy the certificates through one of the less secure methods: > You must manually turn on trust for SSL/TLS when you install a profile that is sent to you via email or downloaded from a website. The more secure deployment methods do not require this: > Apple recommends deploying certificates via Apple Configurator or Mobile Device Management (MDM). Certificate payloads are automatically trusted for SSL when installed with Configurator, MDM, or as part of an MDM enrollment profile. Both of these quotes are from the link you provided.