When trying to get SEP clients to Enroll to the SEDR Appliance, you see that there is no enrollment despite all other conditions appearing to be correct in regards to network communication and certificate trusts.
This issue is due to a misconfiguration on the External Communication policy settings
Scroll down to External Communications and change this to Use Group Communication Settings:
The setting should now say Group: