How to solve the Administrator Certificate-Based Authentication with issue of Redirection to prompt the username and password

[rmeddane]

The Certificate-Based Authentication for administrators to access the firewall through the web interface transparently authenticates the admin with a client certificate instead of prompting and entering manually the username and password.

The Client Certificate must be generated and signed either by the built-in CA of the Firewall or an Enterprise CA. The Common Name that you enter in the CSR should be the username of the Admin and the same username should be also created in the firewall as non-local database account with the option "Use only client certificate authentication (Web)" checked.

The Certificate Profile that defines which CA's certificate the firewall will use to verify the Client Certificate. This certificate profile contains the option "Username Field", In this field you need to select the option "Subject" to instruct the firewall to use the Common Name defined in the client certificate as the username when authenticating through the Web Interface.

Without specifiying the Username Field in the Certificate Profile, the Admin will be redirected to enter a username and password as shown below because the firewall  is unable to find which field in the client certificate it must use to authenticate the adming, and this is not the goal of using Administrator Certificate-Based Authentication.

To fix this, specify the Username Field to be the Common Name or the Subject Alternative Name.

[C.Muniraju]

Is there any option to customize a response page for admins who does not have certificates, 
we are getting error 400 bad request, we are expecting response like access denied