|
Question : Major IIS Problem
|
|
I have been working on this problem for over 5 months. I cannot get Client Certificates to work within IIS. I can enable SSL connections to my web site by processing my own certificate request form using Certificate Server, and that's as far as I can go. If I try to require client authentication I get nowhere. All the documentation I have is contradictory on this matter. Can someone please give my step by step instructions on how to require client authentication and map certificates to NT accounts. Don't refer me to a technet article -believe me I have looked at them. Has anyone done this before???
|
Answer : Major IIS Problem
|
|
I GOT IT!!! The problem was that the Certificate Authority used in IIS isn't the proper authority. Remember how no matter what we did we couldn't get the freaking CERT into the personal folder to choose from when the IIS server was asking for it. Well check this out.
Go Here:
https://digitalid.verisign.com/cgi-bin/OEenroll.exe?name=undefined&email=undefined
and choose to do the 60-day trial thingy. When your filling out the little form don't choose for the security key thing it just makes it take longer. You will have to wait for them to send it to your email but it doesn't take long. After you get the email do like it says and it will install it into your PERSONAL folder on the client Pc NOT THE IIS SERVER. Now go into the MMC and choose to "Require Client Cert." at first do it without the mappings. Then go back to the client that you installed the cert on and try to hit the https://page choose to proceed the box will come up and low-and-behold your cert is in there choose ok and your in. Bottom Line is that MS is full of S*** when they say that it's Certificate Server can issue valid client certificates with IE 5. If you need to map the cert to specific accounts you will have to export that cert in base64 format to a .CER file. Copy that file to the IIS server and setup your mappings with it. It works beautiful here I hope you can get it running. Good Luck!
|
|
|