We are developing an application, that is using client certificate needed for client authentication (HTTPS connection) when using a specific web service. When a customer company has hundreds of computers, the IT admin has to install this client certificate on each computer (and every year when the client cert is renewed).
My question is, is it possible to have the client certificate in a single place (single computer, server), so all PC clients will somehow obtain certificate from this server? But what about the private key, which is needed together with the client cert, during the authentication.
And to make it harder, is there a solution that does not require a more complex hardware solution like a domain (as some customers have only a very simple network with a few computers)?
Thank You for any information.
EDIT: The client certificates are issued by the organization that operates the webservice. Each company, that uses this webservice, earns only one client certificate (so all PC clients within company use the same certificate).