Microsoft has published an in-depth guide detailing how to implement certificate-based authentication for Windows Admin Center (WAC) gateway servers by leveraging Active Directory Certificate Services (AD CS).
This enhancement enables organizations to enforce smart card or virtual smart card logon for administrators, ensuring that access to WAC is granted only when a valid client certificate is presented.
https://cyberpress.org/microsoft-publishes-guide/