Hi Filbert, Thank you for the reply and Sorry for the delay in replying. I was indeed confusing the fact that it is a user certificate, not a device certificate that is used for the browser initiated authentication. Once I'd set up the user to enroll with the CA, the authentication worked as required. Regards, Alastair. ... View more