I am attempting to deploy a project from Visual Studio Enterprise 2017 v15.5.7 to IIS v8.5 on Windows Server 2012 R2 using the Web Deploy publish method.
I am able to do so successfully when I enter a username and password, either of a Active Directory user who is a member of the local Administrators group, or of a IIS Manager User. Due to local security requirements, these methods are not viable long term options. The best setup would be certificate based authentication from a smart card. Currently, there are no users or groups listed in IIS Manager Permissions or IIS Manager Users. My understanding is that members of the local system's Administrators group have access by default.
In the publish profile settings, if I leave the username and password fields blank and click the 'Validate Connection' button, I am prompted to input credentials, where I can choose a smart card hosted certificate, and then enter its PIN.
Doing so, however, results in the following error message:
Connected to the remote computer ("example.com") using the Web Management Service, but could not authorize. Make sure that you are using the correct user name and password, that the site you are connecting to exists, and that the credentials represent a user who has permissions to access the site. Learn more at: http://go.microsoft.com/fwlink/?LinkId=221672#ERROR_USER_UNAUT HORIZED. The remote server returned an error: (401) Unauthorized.
I am able to log in to this server with via remote desktop using a smart card.
Does Web Deploy support using smart card hosted certificates for authentication?