Do you have the complete chain installed under "Trusted Client CAs"?  If the same client certificate is being provided in both scenarios, the only other potential issue is how the SA/MAG is evaluating the certificate chain causing the failure. Do you have a case open for this issue?  Ideally, JTAC will need to review a system snapshot with certificate event codes to confirm this theory. ... View more