If a web application is secured by DualShield, and its logon procedure allows users to use device certificates, then users will be able to register their device certificates in the logon process. However, this feature is currently supported on Windows OS only. For other Operating Systems, such as Mac OS, iOS and Android, users will have to deploy device certificates manually using the self-service console.
When a user selects to use DeviceCert in a logon process from a device that has not been registered, then the user will be prompted to register the device:
...