The customer's corporate policies require devices attaching to their Microsoft corporate network use certificate authentication using EAP-TLS and be managed through an MDM management system.  Currently at MS we are using Intune.  Because of these restrictions, we disallow the loading of exported certificates and require certification delivery to occur through the Intune system.

Can the Android OS on the MC92 connect to Google Play and install an app? It appears that Intune supports Android devices via a Company Portal App deployed in the Google Play store.
Do you know if the Windows Embedded versions support VPN?   That might be another option we can use to connect these devices to our corporate network.