Self-Service picks wrong certificate => server refuses download

Valued Contributor

Dear all,

I have a client on which the Self-Service app picks what looks like a personal certificate instead of the device certificate from the JSS. The server is not happy with the presented certificate (which I understand), and refuses access to the packages the user wants to install.

Have you ever seen such a case? Why would the app pick the wrong certificate, and what can be done to avoid that?