Active Directory Certificate Services: deploy certificates for Android devices

Hi,

I have my network configured already with AD Certificate Services to deploy certificate for Windows PCs. This deployment has been tested and it is fully working.

I would like to add mobile devices to the picture and be able to deploy certificates to Android devices.

The quick solution I found is basically via Web Enrollment allowing the user to authenticate with his username/pwd and retrieve a user certificate from AD CS. 

Is there any alternative to this solution? I see 2 problems:

- it is not automated

- the interface of web enrollment is really bad for mobile devices

Regards,

Antonio