Web apps should request an SSL certificate for all incoming requests.

[oryxway]

What steps need to be taken in order for us to obtain client certificates? Should these client certificates be installed by each individual or how does this work?