Just a bit more evidence that the certificate is not being sent.

If I set the BizTalk HTTP send port to Basic authentication and set a
username/password, and on the target web server, in IIS, set the access
permissions to allow basic authentication, require SSL but just ACCEPT
certificates with no mapping to a windows user then it all works.

As soon as I set the IIS access to REQUIRE certificates I get 403, even with
basic authentication still set.

Note that if I change the thumbprint slightly in the BizTalk HTTP send port
configuration then I get a different error in HAT. The error indicates that
the certificate could not be found, so I know that BizTalk is looking for th
e
certificate but my guess is that it's not being sent.

Because the request is rejected by the web server with a 403 response, I
can't tell what the request looked like. Does anyone know how to capture the
HTTP request, either as it leaves the BizTalk server or as it arrives at the
web server but before IIS processes it? This is a bit beyond my skills!

Doug

[ Post a follow-up to this message ]