how to use client certificate in IIS manager?

Question

Hi everybody

I use IIS manager (v10) in windows 10 (21H2) and have certificate of client. i know that tick "require" in client certificate (SSL settings). but when client open the page (in chrome), get 403 error ("403 - Forbidden: Access is denied. You do not have permission to view this directory or page using the credentials that you supplied.").

certificate installed in client.

I want user with specific certificate can access the website.

client is not in domain/workgroup.

Answer 1

Hello ,

 

Thank you for posting in QA forum.

To configure Client Certificate Mapping Authentication, please kindly try below steps:

1.Please install IIS Client Certificate Mapping Authentication Feature on the server.

2.In IIS Manager, please select the website you want to configure > in the Features section, double-click Authentication > select Enable for Client Certificate Mapping Authentication and apply.

3.In IIS Manager, select the website > in the “Features” section double-click SSL Settings > Under Client Certificates, select Require > Click Apply in the Actions pane.

Meanwhile please go to IIS server > Server Certificates > Create Client Certificate Mapping and map the client certificate to a user account.

REF:

https://learn.microsoft.com/en-us/iis/configuration/system.webserver/security/authentication/clientcertificatemappingauthentication

https://learn.microsoft.com/en-us/iis/configuration/system.webserver/security/authentication/iisclientcertificatemappingauthentication/

 

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.



Regards,

Jill Zhou