Certificate needed for client authentication in CMG

HI Anoop/Team,

Hope everyone is doing well and being safe!

Need someone’s expertise to understand the authentication procedure of clients with cloud management gateway.

As per the Microsoft current documentation if we have a cert issued by a known third-party cert provider like Digicert we don’t need the trusted root certificate for the client to trust the issuer.

But since the certificate authentication is a two process to even though the client would be able to trust the cert and the server identity so it could borrow the content from these servers how could the server trust the identity of these clients?

Need someone help does the client need to have some kind of cert or identity or certificate to make themselves trusted considering when they are not Hybrid/Azure Ad joined?

Hope someone’s experience can help me out to clear this confusion :).

Thanking you in advance !!

Regards,

Arvind Dubey