How to install the client ssl certificates with no intervention from them

From: Jason Payne (jason@commercewest.net)
Date: 10/09/02 

From: "Jason Payne" <jason@commercewest.net>
Date: Tue, 8 Oct 2002 15:52:55 -0700

Enviornment:
NT4 SP6a running IIS4 (with Certificate Server 1.0)
Created a virtual directory with ssl, and followed MS article Q218445 "How
to Configure Certificate Server for Use with SSL on IIS"
Tested it from clients pc's from within the office and it works with the
https://

Need:
It did work from the clients pc's, BUT (also is mentioned in the end of the
Q218445 article above) we had to go through these steps on the client:
1. Install the Root CA Certificate on the client
2. Install a Certificate on the client

We cannot have our outside customers go through this just to access our
website!
We would like the client Certificate installation to be "invisible" to the
user, "unattended".

Please help!

Thanks in advance,

Jason Payne

Relevant Pages

  • Re: MOD_SSL and MOD_AUTH_OPENVMS
    ... ## for proper server startup. ... ## SSL Support ... # List the ciphers that the client is permitted to negotiate. ... # Point SSLCertificateFile at a PEM encoded certificate. ...
    (comp.os.vms)
  • Re: Using SSL with IIS 5.0 - how does it work.
    ... Description of the Secure Sockets Layer (SSL) Handshake ... username and password when users authenticates to server (e.g. to check ... his/her e-mail) (client sends this data to the server) ... If you want your users to trust your SSL certificate ...
    (microsoft.public.inetserver.iis.security)
  • Re: OpenSSL read/write timeouts
    ... This is an example of a SSL client with minimum functionality. ... This SSL client verifies the server's certificate against the ... the SSL server does not request & verify the client ...
    (comp.os.vms)
  • Re: Need for encryption in WSE 3.0 if using SS-avoid man-in-middle
    ... SSL only validates you are talking to a SSL certified server; ... They can simply edit the URL the client program ... can be done by using a X.509 certificate on both ends, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Web Service Security
    ... installing the client certificate properly. ... you must install the certificate with a private key (usually ... asmx resource (use the ?wsdl to pull up the wsdl). ... You also should be able to apply the "requires client cert" setting at the ...
    (microsoft.public.dotnet.framework.aspnet.security)
Quantcast