If remote users are configured to log in with certs but do not have a certificate, what happens?

• A. User will not be able to log on
• B. They can log in with username
• C. Login succeeds with password
• D. They are prompted to enroll a certificate

Answer: (A)

Certificate-based login hinges on presenting a valid client certificate. When remote access is configured to require certs, the authentication step accepts only a certificate issued by a trusted authority; username or password alone isn’t sufficient. If a user does not have a certificate, there’s no credential to satisfy the login requirement, so the authentication fails and login is not allowed. Enrollment is a separate process and isn’t automatically triggered at login in this setup, so you can’t bypass the requirement by typing a password.