I'm trying to get client certificate authentication working with a user cert from a third party CA (DST ACES). My test IIS box has 'client certificate mapping authentication' installed. On the server, I have enabled 'Active Directory Client Certificate Authentication'
at the server level in IIS. On my Default Web Site, I've enabled 'require SSL' and 'require client certificate'. I have a self-signed cert (generated by IIS) on the server. I've added the root CA cert to the Trusted Root Certificate Authorities on the IIS
server (as well as the intermediate cert into the Intermediate Certification Authorities) When I browse to the site, I get a 403.7 error. I'm never prompted for anything on the client. Thoughts welcome on whatever step(s) I'm missing Blake
↧