Portal Page for internal authentication, with certificat download

[MRamadanAHafiez]

Hello Bros'

                I am running into a new configuration required for my palo alto setup.

Due to changes we need to make traffic decryption for unmanaged network over virtual wire setup "in/out".

to decrypt this traffic we need to distribuit the certificate "self signed" regardless windows, linux, andoid, or apple ios.

To accomplish this we are thinking of portal page that receives a users input authentication "internal DB users" and the response page won't redirect the traffic unless users accept the certificate "for decryption" and enter their credentials "for identity".

knowing the most important part is certificate injection in the users trying to connect devices.

I this setup supported?, I have been through response page configurations links but found nothing matches my need. 

Software PanOS:9.0.x 

Any links or assistance would be appreciated

TIA

[MRamadanAHafiez]

Hello,

       So far, I could enable the captive portal, with redirect to intercept the connection asking for authentication.

and still testing.