0

I've created a self-signed certificate in IIS7. Then I exported this certificate to a .pfx and then installed it on the client machine's IE browser. Then I set "Require Client Certificate" on the server's IIS configuration. When I try to visit the site with IE, a dialog box comes up for me to choose a certificate, however, there are no certs in that dialog box. When I click "OK" without choosing any certs, I get a 403 forbidden error. How can I make this work? Appreciate the help in advance.

Improve this question

2 Answers 2

Reset to default
1

Chances are the SSL only contains the Server Extended Key Usage (EKU) and not the client EKU...

Improve this answer
0

Using Microsoft Management Console, add the certificate manager snap-in and choose CurrentUser. Then import the certificate into the CurrentUser->Personal store.

Restart IE and you should now see the certificate in the list

Improve this answer

You must log in to answer this question.