You can configure the CommServe instance to enter a "lockdown" mode. In this mode, client certificates are validated when installing new clients.
When installing a new client on a locked-down CommCell group, you manually generate a temporary certificate to authenticate the installation. After the temporary certificate is validated during installation, the permanent client certificate is automatically created.
To enforce authentication of client certificates during an installation, refer to the following: