Hello,

I'm trying to implement user authentication via certificates for a website.

In ISS I selected properties for the website -> Directory Security -> Secure
Communications Area (Edit) -> Checked Accept Client Certificates.

Going to the website (using https) a dialog box is brough up asking me to
choose a certificate but no certifcates are displayed. When going to other
secure (https) websites, I'm able to view my certificates in the dialog box.
Does anyone know what the problem is with certificatates not showing up?


--
Bill Larson

Hi Bill,

If you open IE and go to Tools -> Internet Options -> Content and click on
Certificates button. Do you see any certificates listed under Personal tab?

Did you set up certificate to user mappings on the IIS server? Is this
server member of Active Directory domain?

--
Mike
Microsoft MVP - Windows Security

"Bill" <Keep [at] community.nospam> wrote in message
news:A0B442D9-4E74-4239-B5E4-974A9FC1A592 [at] microsoft.com...
> Hello,
>
> I'm trying to implement user authentication via certificates for a
> website.
>
> In ISS I selected properties for the website -> Directory Security ->
> Secure
> Communications Area (Edit) -> Checked Accept Client Certificates.
>
> Going to the website (using https) a dialog box is brough up asking me to
> choose a certificate but no certifcates are displayed. When going to other
> secure (https) websites, I'm able to view my certificates in the dialog
> box.
> Does anyone know what the problem is with certificatates not showing up?
>
>
> --
> Bill Larson

Hello Mike,

When opening up the certificate dialog in IE, I see three certificates under
the personal tab. In ISS, the certificate was not setup to use user mappings
and the client/server are not members of an Active directory domain.
--
Bill Larson


"Miha Pihler [MVP]" wrote:

> Hi Bill,
>
> If you open IE and go to Tools -> Internet Options -> Content and click on
> Certificates button. Do you see any certificates listed under Personal tab?
>
> Did you set up certificate to user mappings on the IIS server? Is this
> server member of Active Directory domain?
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "Bill" <Keep [at] community.nospam> wrote in message
> news:A0B442D9-4E74-4239-B5E4-974A9FC1A592 [at] microsoft.com...
> > Hello,
> >
> > I'm trying to implement user authentication via certificates for a
> > website.
> >
> > In ISS I selected properties for the website -> Directory Security ->
> > Secure
> > Communications Area (Edit) -> Checked Accept Client Certificates.
> >
> > Going to the website (using https) a dialog box is brough up asking me to
> > choose a certificate but no certifcates are displayed. When going to other
> > secure (https) websites, I'm able to view my certificates in the dialog
> > box.
> > Does anyone know what the problem is with certificatates not showing up?
> >
> >
> > --
> > Bill Larson
>
>
>

Hi Bill,

The CA which issued the client certificate must be trusted by the IIS
server. Otherwise the client cert will not be in the list. You have to
install the CA certificate into the IIS server's Trusted Root Certification
Authorities store.

Please refer to the article below:

332077 IIS 6.0: Computer must trust all certification authorities trusted by
http://support.microsoft.com/?id=332077

Let me know if issue persists.

Best regards,

WenJun Zhang
Microsoft Online Partner Support

This posting is provided "AS IS" with no warranties, and confers no rights.

Thanks for the help, that did the trick.
--
Bill Larson


""WenJun Zhang[msft]"" wrote:

> Hi Bill,
>
> The CA which issued the client certificate must be trusted by the IIS
> server. Otherwise the client cert will not be in the list. You have to
> install the CA certificate into the IIS server's Trusted Root Certification
> Authorities store.
>
> Please refer to the article below:
>
> 332077 IIS 6.0: Computer must trust all certification authorities trusted by
> http://support.microsoft.com/?id=332077
>
> Let me know if issue persists.
>
> Best regards,
>
> WenJun Zhang
> Microsoft Online Partner Support
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>