0

I've created a self-signed certificate in IIS7. Then I exported this certificate to a .pfx and then installed it on the client machine's IE browser. Then I set "Require Client Certificate" on the server's IIS configuration. When I try to visit the site with IE, a dialog box comes up for me to choose a certificate, however, there are no certs in that dialog box. When I click "OK" without choosing any certs, I get a 403 forbidden error. How can I make this work? Appreciate the help in advance.

2 Answers2

1

Chances are the SSL only contains the Server Extended Key Usage (EKU) and not the client EKU...

Dscoduc
  • 1,095
  • 2
  • 8
  • 15
0

Using Microsoft Management Console, add the certificate manager snap-in and choose CurrentUser. Then import the certificate into the CurrentUser->Personal store.

Restart IE and you should now see the certificate in the list

Wayne
  • 3,104
  • 1
  • 22
  • 16