Creating Self Signed Certificate

Question

Hello,

I have created a self signed certificate that requires you to enter a password when creating. This is being used for internal portals - for example *.XXX.internal, or amp.XXX.internal. My question is, why do I have to install this on all PC's for it to work and not just the server hosting the websites.

Thanks for your help in advance,

Chris

Answer 1

Hello Daisy,

Thanks again for your quick reply. I do not have certificate required checked. See screen prints below. All sites set same way.

When I go to the website from a workstation -

Answer 2

Hello TJ_CJA,

Good day!

if you do not want to install certificate on client, you can set "Ignore" when you install Self Signed Certificate on server.
if you do want to install certificate on client, you can set "Require" when you install Self Signed Certificate on server, then the client need certificate.

My question is, why do I have to install this on all PC's for it to work and not just the server hosting the websites.

A: I think because you set "Require" when you install Self Signed Certificate on server, then the client need certificate.

If you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

Answer 3

Hello Daisy,

Thanks for your reply. Yes, all my portals have the settings above. Any other suggestions?

Thanks,

Chris

Answer 4

Hello Daisy,

Thanks for your reply. Yes, all my portals have the settings above. Any other suggestions?

Thanks,

Chris

Answer 5

Hello TJ_CJA,

Thank you for posting in Microsoft Community forum.

When you install this Self Signed Certificate on sever, did you set any setting for client certificate: Ignore, Accept or Require?

If you set "Ignore" when you install Self Signed Certificate on server, then the client do not need certificate.

If you set "Require" when you install Self Signed Certificate on server, then the client do not need certificate.

Similar like this:

I hope the information above is helpful.

If you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou