Fireware 12.6 and above configuration templates where "enable automatic update of trusted CA certificates" is enabled is not applied to fully managed clients.
Thanks for the report.
Is this happening to newly managed firewalls, or existing ones too?
WatchGuard Customer Support
I'm not able to get this to happen in my lab environment, but my configs are very likely not as complex as the running ones you have in the field.
If you haven't done so already, would it be possible for you to open a case so we can look into this more deeply.
Case opened, 01621129.