Encrypt Configuration Profile

I'm trying to figure out how to encrypt the Configuration profile sent to an iPhone, but can only find references to "use CMS" but nothing about what key/certificate I should be using to encrypt...

Can anyone point me in the right direction?

Encrypt Configuration Profile
 
 
Q