There is a restriction from the MDM that is blocking the installation of the ONP certificate.
From the policies in WorkspaceOne, make sure that the “Allow credential changes” option is selected.
'Devices > Profiles & Resources > Profiles > Add Under Restrictions > Allow Credentials Changes':
This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.