An administrator is troubleshooting MRA registration failures and discovered that the affected endpoints have expired manufacturer-installed certificates (MICs) What must be configured to permit the end-to-end registration and media encryption without using the Certificate Authority Proxy Function?