ProvisionManagedClientCertificateForUser

Setting this policy to Enabled (value 1) will make the browser request a client certificate from the device management server for a managed user or profile. This certificate will be made available for, e.g., mTLS connections. Setting this policy to Disabled (value 0) will prevent the browser from requesting the client certificate. If a profile's managed client certificate had already been provisioned, due to this policy being enabled before, it will not be deleted, but it won't be available for mTLS connections and won't be renewed when it expires.