I have an mTLS setup where browsers (Chrome, Edge, Firefox) request a client certificate. I want to prevent any certificate prompt from appearing — either by not sending a client certificate at all or by silently handling it if one exists.
I’m aware of solutions that configure an “auto-select” policy, such as setting AutoSelectCertificateForUrls in Chrome/Edge or security.default_personal_cert = "Select Automatically" in Firefox. However, I need to avoid these approaches for various reasons (e.g., multiple certs still cause prompts, policy complexities, etc.).
Question: Is there a straightforward way to completely disable the client-certificate selection prompt in modern browsers? For example, an official group policy or some registry hack that forces no prompt to appear at all. If not, what’s the recommended alternative (beyond auto-selection) to ensure users never see a certificate prompt?
Thanks in advance for any insights!