A correction for the above post. enrollment process and config retrieving are different thing. In this point, there is a confusing situation at least for me… “config_refresh” is used for config retrieving whereas “config_tls_max_attempts” is for both config retrieving and enrollment request it is may be a more appropriate approach to define number of enrollment request in a different flag instead of “config_tls_max_attempts”