IIS Server Security - Client-Certs in a Trusted Forest

Author

Client-Certs in a Trusted Forest

Jochen Ruhland

2004-06-27, 7:48 am

Hi,

I have installed a Cert-structure in one AD-Domain (Root-CA and
Subordinate CA) and can use this to log on to the webserver that is
also running the Sub-CA.

Now I want to secure another webserver that is part of a second AD which has
a Trust-relationship to the first CA. I can assign rights to users of the
other AD to files&folders fine.

I've issued a cert for the new webserver from the Root-CA and set the
website to ask for a client-cert.

If I try to access the website on the second server I get the
"select your cert"-dialogue at the client but the box is empty. If I try
this with the first server I can see the installed cert there.

Any ideas?

Jochen