This optional parameter forces TTLS and PEAP to require a valid client certificate to be presented by the client. TLS always requires a valid client certificate, regardless of the setting of this parameter. In this case, valid means that the certificate is within its validity dates and has been signed by a CA for which Radiator has a root certificate.