Client-side certificate authentication

This section contains the following topics:

Client-side certificate authentication modes
Certificate authentication configuration task summary
Enabling certificate authentication
Configuration of the certificate authentication mechanism
You can use the External Authentication Interface (EAI) protocol to configure a junctioned web application to handle certificate authentication on behalf of WebSEAL.
Certificate login error page
Administrators can choose to use the default error page, customize the error message, or specify an entirely different customized error page. Typically, administrators use the default page but might customize the contents of the error message.
Certificate login form
Disabling SSL session IDs for session tracking
Enabling and configuring the Certificate SSL ID cache
Setting the timeout for Certificate SSL ID cache
Error page for incorrect protocol
Disabling certificate authentication
Disabling the Certificate SSL ID cache
Technical notes for certificate authentication
For all certificate configurations, a client-side certificate can be presented only once per browser session.

Parent topic: Authentication methods

Related concepts