I'm a programmer in the process of writing Web Services on a website for a specific client. These Web Service can only be accessed by this one client. They intend to send a client certificate over SSL with each request, and I need to verify the identity of the requestor based on the certificate. We currently have an SSL certificate which the client will use to verify our identity.
I am a programmer, so security/certificates is not something I'm very familiar with, but, I am tasked with figuring it out. How do I go about setting this up? This needs to be setup for Windows Server 2003 R2 running IIS 6.