Hello - did you already raise a support case for this? That might help here.   You might also run a test using ssl.requireCert() which will generate a handshake failure if the client fails to present a client certificate. The sslfail logs can be enabled on the virtual server to get more information about TLS failures (including the one generated by the ssl.requireCert() trafficscript function).   Also check that you have cleared any cached state from the web browsers - you may need a complete restart to clear all client certificate information.   ... View more