Configure X.509 client authentication from the end user’s browser to the session server
There are complete instructions in
Configure X.509 Authentication
.