Enable certificate-based authentication to allow your users to access ePO - On-prem with a valid client certificate instead of a user name and password.
Client certificate authentication is a type of public-key authentication. It differs from public-key authentication because you grant trust to a trusted third party, known as a certification authority (or CA). Certificates are digital documents that combine identity information and public keys. The CA digitally signs the certificates and verifies that the information is accurate.
When a user tries to access ePO - On-prem using certificate-based authentication, ePO - On-prem checks the client certificate to make sure that it was signed. After the client certificate is verified, the user is granted access.
Certificates have predefined expiration dates, which force the review of user permissions.
For users configured with valid certificates, certificate-based authentication replaces password authentication. All other users continue to use passwords to access ePO - On-prem.
Before your organization can use certificate-based authentication, install the CA certificate on ePO - On-prem and a signed client certificate on your endpoints.