A. Yes, you can easily trigger automatic certificate enrollment with the following certutil command.

 certutil –pulse

 Make sure you do this from an administrator-level command prompt window.