I have a website that's hosted on IIS 8.0 that I would like to require client certificates.
I know about how to enable this in IIS, but I'm unsure what is required in the certificate store on the server. Do I need to load each and every client certificate my users will be using into the certificate store? Or do I only need to ensure that the root of their certificate chain is among the trusted roots on my server? What about intermediate certificates in their chain?
Note : I am not using the client certificate mapper for active directory. I am doing application specific mapping within the hosted app itself.