i have a PIV enabled website that basically requires all PIV card certificates to match the server store, upon login, by requiring client certificate on the IIS. as soon as the card is removed from the reader, the session gets lost and the user gets the dreaded 403 error. has anyone come across this? is it possible to somehow cache or keep the client certificate handshake alive, after the PIV card is removed?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.