IIS Server Security - How to create a Client certificate

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > July 2005 > How to create a Client certificate





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author How to create a Client certificate
Lara

2005-07-13, 2:48 am

Hi,
I've created a Server Cerificate for My Windows 2000 server. Now i want to
create the Client certificate for the clients connected to this server. I
tried several methods. Can anyone help in creating the Client certificates .

I've created the certificate in IIS->webserverName->rightClick prop ->
security.....

Thanking in advance
Lara


David Wang [Msft]

2005-07-13, 7:55 am

Do you just want to connect to the server using SSL, or do you actually want
to use SSL Client Certificate based authentication?

To do the former, you just need to configure a server certificate.

To do the latter, you will need to create a Root Certificate, set this up
everywhere so that clients and servers trust it, then sign and distribute
certificates (both client and server) using this Root Certificate for
purposes of identification, etc.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Lara" <lara@hotmail.com> wrote in message
news:OqqdI23hFHA.2644@TK2MSFTNGP09.phx.gbl...
Hi,
I've created a Server Cerificate for My Windows 2000 server. Now i want to
create the Client certificate for the clients connected to this server. I
tried several methods. Can anyone help in creating the Client certificates .

I've created the certificate in IIS->webserverName->rightClick prop ->
security.....

Thanking in advance
Lara



Lara

2005-07-13, 7:55 am

Thanks david, I've created the Root CA. And copy& installled the same in
the clients also. But again it's showing the message something like 'Do U
want to proceed to this Secured Site'. I want, not to show this message
after the installation on the client side ?

thanking in adavance for your reply


"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:#CynBj5hFHA.2444@tk2msftngp13.phx.gbl...
> Do you just want to connect to the server using SSL, or do you actually

want
> to use SSL Client Certificate based authentication?
>
> To do the former, you just need to configure a server certificate.
>
> To do the latter, you will need to create a Root Certificate, set this up
> everywhere so that clients and servers trust it, then sign and distribute
> certificates (both client and server) using this Root Certificate for
> purposes of identification, etc.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no

rights.
> //
> "Lara" <lara@hotmail.com> wrote in message
> news:OqqdI23hFHA.2644@TK2MSFTNGP09.phx.gbl...
> Hi,
> I've created a Server Cerificate for My Windows 2000 server. Now i want to
> create the Client certificate for the clients connected to this server. I
> tried several methods. Can anyone help in creating the Client certificates

..
>
> I've created the certificate in IIS->webserverName->rightClick prop ->
> security.....
>
> Thanking in advance
> Lara
>
>
>




David Wang [Msft]

2005-07-14, 2:48 am

Can you please describe what you are really trying to do? I am confused by
why you are installing root CAs in the client when your original question
was about client certificates.

Most security popup dialogs are due to client-side configuration, and some
can be silenced. However, I would not silence any of them because it means
you did not configure something correctly. When everything is done
correctly, you won't see any warning/errors from the browser at its most
secure setting.

For example, IE can be configured to show a warning if you are switching
between HTTP and HTTPS. I think that is what you are seeing, and that has
nothing to do with server configuration.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Lara" <lara@hotmail.com> wrote in message
news:Owa27B6hFHA.3164@TK2MSFTNGP15.phx.gbl...
Thanks david, I've created the Root CA. And copy& installled the same in
the clients also. But again it's showing the message something like 'Do U
want to proceed to this Secured Site'. I want, not to show this message
after the installation on the client side ?

thanking in adavance for your reply


"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:#CynBj5hFHA.2444@tk2msftngp13.phx.gbl...
> Do you just want to connect to the server using SSL, or do you actually

want
> to use SSL Client Certificate based authentication?
>
> To do the former, you just need to configure a server certificate.
>
> To do the latter, you will need to create a Root Certificate, set this up
> everywhere so that clients and servers trust it, then sign and distribute
> certificates (both client and server) using this Root Certificate for
> purposes of identification, etc.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no

rights.
> //
> "Lara" <lara@hotmail.com> wrote in message
> news:OqqdI23hFHA.2644@TK2MSFTNGP09.phx.gbl...
> Hi,
> I've created a Server Cerificate for My Windows 2000 server. Now i want to
> create the Client certificate for the clients connected to this server. I
> tried several methods. Can anyone help in creating the Client certificates

..
>
> I've created the certificate in IIS->webserverName->rightClick prop ->
> security.....
>
> Thanking in advance
> Lara
>
>
>





Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com