I have two Windows 2008 x86 servers running IIS 7.0, one site on each server; both sites are SSL-enabled, using DoD-issued certificates. Both sites are accessible via https over port 443, but fail the moment Client Certificates are set to Require or Accept. IIS log records error 500.0.64 but nothing else.

I have several Windows 2008 IIS 7 x64 servers that require client certificates and they are working as expected; it's just the two x86 servers that are being problematic.

  • Do you need client certificates? Your description sounds like you are just wanting SSL-encryption. – Taylor Jul 15 '10 at 18:12
  • Yes, I need to configure the servers to Require Certificates from clients. The servers in question have a valid SSL-cert installed; that part is working. It's just when the Client Certificates option is enabled that users can no longer access the site. – user48443 Jul 16 '10 at 13:52
  • Unless there is a genuine fault, it sounds like the server can't validate the client's cert (e.g.: chaining issue), or it can't perform a CRL check, or it can't access the signing CA. This could be me barking up the wrong tree... – Simon Catlin Jul 21 '13 at 20:38

The solution can be found here and is related to MS KB977377. The choices are

  • Remove MS update KB977377


  • Change the vlaue of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\DisableRenegoOnServer to 0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy