Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have two Windows 2008 x86 servers running IIS 7.0, one site on each server; both sites are SSL-enabled, using DoD-issued certificates. Both sites are accessible via https over port 443, but fail the moment Client Certificates are set to Require or Accept. IIS log records error 500.0.64 but nothing else.

I have several Windows 2008 IIS 7 x64 servers that require client certificates and they are working as expected; it's just the two x86 servers that are being problematic.

share|improve this question
    
Do you need client certificates? Your description sounds like you are just wanting SSL-encryption. –  Taylor Jul 15 '10 at 18:12
    
Yes, I need to configure the servers to Require Certificates from clients. The servers in question have a valid SSL-cert installed; that part is working. It's just when the Client Certificates option is enabled that users can no longer access the site. –  user48443 Jul 16 '10 at 13:52
    
Unless there is a genuine fault, it sounds like the server can't validate the client's cert (e.g.: chaining issue), or it can't perform a CRL check, or it can't access the signing CA. This could be me barking up the wrong tree... –  Simon Catlin Jul 21 '13 at 20:38
add comment

1 Answer

The solution can be found here and is related to MS KB977377. The choices are

  • Remove MS update KB977377

or

  • Change the vlaue of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\DisableRenegoOnServer to 0
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.