RE: HTTP 403.16 - Forbidden: Client certificate untrusted or invalid

From: Cas Irvin [MS] (cirvinonline@microsoft.com)
Date: 08/09/02 

From: cirvinonline@microsoft.com (Cas Irvin [MS])
Date: Fri, 09 Aug 2002 15:29:43 GMT

The only thing we're missing here is the installation of the ROOT
certificate from the CA onto the IIS server.

I understand that you've looked into the "Trust Only Enterprise Root
Stores" option but did you install the root cert from the CA onto your IIS
server?

Q252657 IIS 5.0: HTTP 403.16 Forbidden: Client certificate Untrusted
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q252657

Cas Irvin
IIS Newsgroup Support

Please do not send email directly to this alias. This is our online account
name for newsgroup participation only.

This posting is provided “AS IS” with no warranties, and confers no rights.
You assume all risk for your use. © 2001 Microsoft Corporation. All rights
reserved.

Please remember to subscribe to our security bulletins at
<http://www.microsoft.com/technet/security/notify.asp>

Relevant Pages

  • Re: IIS Gets (but doesnt use) my CRL
    ... My path is three certificates long: root, ... URL - I can successfully browse that URL from the machine IIS is running on. ... The intermediate certificate also has a CDP that points to a URL - likewise, ... I know that the IIS server has downloaded the CRL it ...
    (microsoft.public.security)
  • Second Post: IIS Gets (but doesnt use) my CRL
    ... My path is three certificates long: root, ... URL - I can successfully browse that URL from the machine IIS is running on. ... The intermediate certificate also has a CDP that points to a URL - likewise, ... I know that the IIS server has downloaded the CRL it ...
    (microsoft.public.security)
  • Re: IIS Gets (but doesnt use) my CRL
    ... My path is three certificates long: root, ... URL - I can successfully browse that URL from the machine IIS is running on. ... The intermediate certificate also has a CDP that points to a URL - likewise, ... I know that the IIS server has downloaded the CRL it ...
    (microsoft.public.inetserver.iis.security)
  • Second Post: RE: IIS Gets (but doesnt use) my CRL
    ... My path is three certificates long: root, ... URL - I can successfully browse that URL from the machine IIS is running on. ... The intermediate certificate also has a CDP that points to a URL - likewise, ... I know that the IIS server has downloaded the CRL it ...
    (microsoft.public.inetserver.iis.security)
  • Second Post: IIS Gets (but doesnt use) my CRL
    ... My path is three certificates long: root, ... URL - I can successfully browse that URL from the machine IIS is running on. ... The intermediate certificate also has a CDP that points to a URL - likewise, ... I know that the IIS server has downloaded the CRL it ...
    (microsoft.public.inetserver.iis.security)