3474524 - Client Certificate authentication failing in EC to Workforce integration

You wish to set up client certificate-based authentication in the following CPI packages:
Packaged Integration - SF EC to WFS
Packaged Integration SF EC to WFS - Custom Mapping

However, the set up fails with 401 errors similar to the following:
401
'401: Unauthorized'
HTTP response '401: Unauthorized' when communicating with [CPI tenant URL]
401: Unauthorized. error in Packaged Integration - WFS to SF EC Payroll

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

Packaged Integration - SF EC to WFS
Packaged Integration SF EC to WFS - Custom Mapping

SF EC to WFS, WFS, workforce, Solex, Packaged Integration - SF EC to WFS, Packaged Integration SF EC to WFS - Custom Mapping, "org.apache.cxf.interceptor.Fault: Could not send Message., cause: org.apache.cxf.transport.http.HTTPException: HTTP response '401: Unauthorized' when communicating with", Could not send Message., cause: org.apache.cxf.transport.http.HTTPException: HTTP response '401: Unauthorized. error in Packaged Integration - WFS to SF EC Payroll, 401, HTTP response '401: Unauthorized. error in Packaged Integration - WFS to SF EC Payroll, client certificate, basic authentication, authentication, certificate authentication, certificate-based , KBA , LOD-SF-INT-CPI-TPI , Standard SF to 3rd Party Integration using CPI , LOD-SF-INT , Integrations , How To