Web apps should request an SSL certificate for all incoming requests.

What steps need to be taken in order for us to obtain client certificates? Should these client certificates be installed by each individual or how does this work?