# Keycloak Not promoting for Cert after setting up x509 browser flow

**URL:** <https://forum.keycloak.org/t/keycloak-not-promoting-for-cert-after-setting-up-x509-browser-flow/20486>\
**Category:** Miscellanaeous\
**Tags:** authentication\
**Created:** [February 24, 2023, 6:56pm UTC](https://forum.keycloak.org/t/keycloak-not-promoting-for-cert-after-setting-up-x509-browser-flow/20486 "2023-02-24T18:56:31Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Domenix](https://avatars.discourse-cdn.com/v4/letter/d/51bf81/32.png) [@Domenix](https://forum.keycloak.org/u/Domenix)\
**Post date:** [February 24, 2023, 6:56pm UTC](https://forum.keycloak.org/t/keycloak-not-promoting-for-cert-after-setting-up-x509-browser-flow/20486/1 "2023-02-24T18:56:31Z")

</div>

We are trying to configure Keycloak to allow Common Access Card (CaC) SSO and have followed the steps described in the keycloak documentation ([Server Administration Guide](https://www.keycloak.org/docs/latest/server_admin/#_browser_flow)) but when we go to the login page, we are not prompted for a cert and can only use user/password. Any thoughts on why this is happening? we are on version 20.0.3 which is inside a docker container.