All Knox Devices
PKCS10 format CSRs generated in CCM can be used with Microsoft CA to issue certificate which can be installed in CCM. Certificates installed in CCM can be used by Email, Browser, VPN, WiFi, or any other 3rd party app.
Samsung has certificate enrollment protocols - SCEP, EST, CMP clients which can be used for certificate enrollment. These clients are integrated with CCM and can be used to enroll certificates either in CCM (TrustZone solution) or the default Android credential store.