Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In IIS 7, I've created an https binding for a site, and I'd like to require client certificates for https and still keep my http endpoint.

That is to say, I'd like to require client certificates for my https endpoint without requiring SSL across the board and disallowing access to my http endpoint (via "require SSL" in SSL Settings). Is this possible?

share|improve this question
Define "endpoint"? Each site has it's own SSL settings. – joeqwerty Oct 3 '12 at 3:29
so, for my site i've created two bindings, one for http and one for https. now, for the https binding, i'd like to require client certificates without losing the http binding. – user1325378 Oct 3 '12 at 3:42
OK, understood. I though you were referring to two different web sites. – joeqwerty Oct 3 '12 at 5:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.