|
Home > Archive > IIS Server Security > November 2004 > SSL Problem
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
| JoJoBinkus 2004-10-22, 5:53 pm |
| Hi,
I recently installed an SSL certificate (from Thawte) on an IIS6 box with 1
default web site.
Although the cert works, on -some- users PC's they receive a "CLIENT
AUTHENTICATION" pop-up dialog box asking them to select their cert they want
to use...and there are no certs listed for them to select...
We don't need/want to use this Client Authentication. In fact, in IIS, if I
edit the Certificate properties (in the secure communications area), I have
"Ignore Client Certificates" checked off (selected)....I also have Client
mappings unchecked...
Why do some users get this pop-up and others don't? And how can I disable it
for all users?
Thanks!
| |
| Bernard 2004-10-25, 2:47 am |
| You mean you didn't require client certificate, but it prompt client to
select client cert ?
doesn't sound right, have you check the site setting again ? and client are
accessing the same site ?
check the status code in IIS log file as well.
--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/
"JoJoBinkus" <JoJoBinkus@discussions.microsoft.com> wrote in message
news:C1195A68-31BE-450D-8989-DCDDBAE974FD@microsoft.com...
> Hi,
>
> I recently installed an SSL certificate (from Thawte) on an IIS6 box with
1
> default web site.
>
> Although the cert works, on -some- users PC's they receive a "CLIENT
> AUTHENTICATION" pop-up dialog box asking them to select their cert they
want
> to use...and there are no certs listed for them to select...
>
> We don't need/want to use this Client Authentication. In fact, in IIS, if
I
> edit the Certificate properties (in the secure communications area), I
have
> "Ignore Client Certificates" checked off (selected)....I also have Client
> mappings unchecked...
>
> Why do some users get this pop-up and others don't? And how can I disable
it
> for all users?
>
> Thanks!
| |
| Yogita Manghnani [MSFT] 2004-11-10, 5:50 pm |
| Hello,
Make sure the Ignore client certificates option is selected on all virtual
directories under the site as well. It could be that someone accidentally
selected Accept or Require client certificates on a specific virtual
directory and only when clients go to that url, they are prompted. There's
no reason for that dialog to pop up if this option is selected in IIS and
the users are going to that same site.
Good luck,
Yogita Manghnani
Microsoft Developer Support
Internet Information Server
****************************************
*****************************[vbcol=seag
reen]
account name for newsgroup participation only.<<
This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.
© 2003 Microsoft Corporation. All rights reserved.
****************************************
*****************************
|
|
|
|
|