The SPA112 has been End Of Lifed, and unfortunately (as mentioned elsewhere) the Cisco ATAs seem to be more reliable for faxing. The ATA191 is the direct replacement but there’s no option to set that as the item.
Fortunately, I can confirm via testing that putting in the TFTP url in voice > provisioning > Profile Rule as <PBXIP/DOMAIN>/spa$MA.xml - and Transport Protocol: tftp.
I did this by setting the type to SPA112 (even though it’s an ATA191-K9) in endpoint manager. It did successfully register the extensions with PJSIP so I think it would be possible to just copy/paste the code for the SPA112 to ATA191.