Is CEP/CES vulnerable to MITM attack? How I can protect clients from this?

I want to use Active Directory Certificate Enrollment (Policy) Web Service to issue client certificates for non-domain joined computers. Is CEP/CES vulnerable to MITM attack, when server send certificate with private key to client? How I can protect clients from this?