ASP.NET Client Certificate Authentication Problem

EagleRed_at_HighFlyingBirds.com
Date: 04/29/04


Date: Thu, 29 Apr 2004 04:31:05 -0700

I am implementing an ASP.NET Web application that requires client certificates. I have a standalone certificate server (Windows 2000, SP4). I used it to generate a server certificate and a client certificate. The client certificate is installed in the Trusted Publishers-Enterprise store. I could not install it in the Personal store.

I build a web application using VS.NET 2003 and set the virtual directory to require SSL and client certs.

In IE 6.1 request, "https://localhost/[Virtual Dir.]/[page].aspx". I get the following result.

The page requires a client certificate
The page you are trying to view requires the use of a client certificate.

--------------------------------------------------------------------------------

Please try the following:

Click the Refresh button to try again, if you have installed your client certificate.
If you believe you should be able to view this directory or page, please contact the Web site administrator by using the e-mail address or phone number listed on the localhost home page.
HTTP 403.7 - Forbidden: Client certificate required
Internet Information Services

--------------------------------------------------------------------------------

Technical Information (for support personnel)

Background:
This error occurs when the resource you are attempting to access requires your browser to have a Secure Sockets Layer (SSL) client certificate that the server recognizes.

How can I get this to work? Ultimately, client certificates will be generated from a customer certificate server and distributed to a limited community of users of the application who will authenticate via certificates.

I would appreciate guidance on this.