In Local Security Policy configuration, I have set System cryptography: Force strong key protection for user keys stored on the computer to value User must enter a password each time they use a key.
After that, I have imported a SSL Client Certificate and created a password to protect it.
After that, I have proceeded to test using Chrome.
My observations are that the first time the SSL Client Certificate is engaged by the Chrome process, user is challenged to enter the password in order to use the certificate. After that, it does not matter if I open new tabs or even change the remote server's port in the address. The user won't be challenged again until Chrome is restarted.
Is there a way to enforce the password challenge every single time, even in the context of the same user process?