So I just had this issue as well. Meraki acknowledged that the profile was corrupt and would have to be abandoned. Copies of the profile would also exhibit the same behaviour and could not be used. I created a new Active Sync profile from scratch and the S/MIME was off when applied.   Good luck!  ... View more