yes these phone model support MRA deployment.
but you have to sign your edge's certificates by one of the trust CAs as the phones support with.
because if the phones seat outside your network, they don't have CTL/ITL to trust internal certificates.
you can still using LDAP authentication.
when the phone will reach the edge, you will see prompt for insert credentials on the phone.
you have to sure your phones have NTP sinchronized also by DHCP option 42 or by the default NTP worldwide as the phone discover.