As an option, you can enable the use of personal certificates in a mandatory profile.

Setting Value
CertificateSupport To enable this setting, set the value to 1.
Note: Do not enable this setting when you are using roaming or local profiles.