Set the certificate matching settings to Subject name matching or Certificate matching. Certificate matching is more restrictive because it checks the login certificate against the list of certificates configured for the user. The No matching option must be used only in specific guest account scenarios, as described in Section 3.3.3, No Matching. For information about how to configure certificate matching options by using iManager, see Section 3.3, Configuring Certificate Matching.