I do not need a solution (just sharing information)
For those of you who are still on one of the products that requires MS NDES for iOS enrollment I just wanted to make you aware that MS15-034 broke our Network Device Enrollment Service. We needed to recreate and reissue both the RA and CEP certs to get iOS enrollment working again.