Yes, a client certificate is required and our EPP servers require SSL connections with certificates.
Note that the common name of the certificate must be unique for each connecting user. This identification is then used to limit the number of connections to the server to four per user.