chromium/components/policy/resources/templates/policy_definitions/Miscellaneous/ProvisionManagedClientCertificateForUser.yaml

owners:
- [email protected]
- file://components/enterprise/client_certificates/OWNERS
caption: Enables the provisioning of client certificates for a managed user or profile
desc: |-
  Setting this policy to <ph name="PROVISION_MANAGED_CLIENT_CERTIFICATE_FOR_USER_ENABLED">Enabled</ph> (value 1) will make the browser request a client certificate from the device management server for a managed user or profile. This certificate will be made available for, e.g., mTLS connections.

  Setting this policy to <ph name="PROVISION_MANAGED_CLIENT_CERTIFICATE_FOR_USER_DISABLED">Disabled</ph> (value 0) will prevent the browser from requesting the client certificate. If a profile's managed client certificate had already been provisioned, due to this policy being enabled before, it will not be deleted, but it won't be available for mTLS connections and won't be renewed when it expires.

supported_on:
- chrome.win:126-
- chrome.mac:126-
- chrome.linux:128-
features:
  dynamic_refresh: true
  per_profile: true
  cloud_only: true
type: int-enum
schema:
  type: integer
  enum:
  - 0
  - 1
items:
- caption: Disable client certificate provisioning
  name: Disabled
  value: 0
- caption: Enable client certificate provisioning
  name: Enabled
  value: 1
default: 0
example_value: 0
tags: []