Located in the certificate store as configured in the GlobalProtect
portal agent configuration. By default, the GlobalProtect agent
first looks for a valid certificate in the user store and, if none
exists, then looks in the machine store. Because the user store
takes precedence, if the GlobalProtect agent locates a certificate
in the user store, it will not look in the machine store. To force
the GlobalProtect agent to look for certificates in only one certificate
store, configure the
Client Certificate Store Lookup
option
in the appropriate GlobalProtect portal agent configuration.