Re: SSL Problem

From: Bernard (qbernard_at_hotmail.com.discuss)
Date: 10/25/04


Date: Mon, 25 Oct 2004 11:54:07 +0800

You mean you didn't require client certificate, but it prompt client to
select client cert ?
doesn't sound right, have you check the site setting again ? and client are
accessing the same site ?
check the status code in IIS log file as well.

-- 
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/
"JoJoBinkus" <JoJoBinkus@discussions.microsoft.com> wrote in message
news:C1195A68-31BE-450D-8989-DCDDBAE974FD@microsoft.com...
> Hi,
>
> I recently installed an SSL certificate (from Thawte) on an IIS6 box with
1
> default web site.
>
> Although the cert works, on -some- users PC's they receive a "CLIENT
> AUTHENTICATION" pop-up dialog box asking them to select their cert they
want
> to use...and there are no certs listed for them to select...
>
> We don't need/want to use this Client Authentication. In fact, in IIS, if
I
> edit the Certificate properties (in the secure communications area), I
have
> "Ignore Client Certificates" checked off (selected)....I also have Client
> mappings unchecked...
>
> Why do some users get this pop-up and others don't? And how can I disable
it
> for all users?
>
> Thanks!


Relevant Pages

  • Re: Disable requesting client certificate when running in SSL
    ... I assigned my cert out of a W2K3 Enterprise CA for the domain ... to impersonate ADAM users in Extranet usage). ... > to have it automatically disable the client certificate ...
    (microsoft.public.windows.server.active_directory)
  • Re: IIS website - only allow users with client cert from our CA. P
    ... Rootyou wish to permit certificates issued from for access to your site. ... our CA's client cert? ... I only have a server certificate from our CA ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS website - only allow users with client cert from our CA. Possi
    ... > Why does IIS allow me to see my website when it doesn't have ... > our CA's client cert? ... I only have a server certificate from our CA ...
    (microsoft.public.inetserver.iis.security)
  • RE: Certificate logon on Unix
    ... I don't know of any package but there is prolly one out there you should ... The good news is that getting fulle client ... and server side authentication is pretty easy so it will work as a quick ... setup your CA and make the root cert Pbk available to everyone. ...
    (Security-Basics)
  • Re: Radius Server
    ... > so I'm guessing the client needs the Server Certificate, ... > export it from the server and import it to the client. ... >> But if you deployed EAP-TLS, you need a server cert and a client ...
    (microsoft.public.windows.server.networking)