3

I installed a new certificate on IIS7.

After I installed the certificate, I opened the site in Chrome and received the following message: enter image description here

I clicked Ok and now when I browse to the site in Chrome, I get an error:

403 - Forbidden: Access is denied

If I browse in Incognito, I get the message again and if I click Cancel, I can browse the site.

When I go back to a normal browsing window, I get the Access is denied error again.

I don't get the error in Edge.

(If I click on Certificate information, it says "This CA Root certificate is not trusted.")

5
  • What site? What certificate? Nov 12, 2018 at 2:08
  • I'm not sure where it is getting that certificate from. It's not an actual certificate.
    – Daniel Gee
    Nov 12, 2018 at 4:24
  • You didn't install a real certificate on a site in IIS? Nov 12, 2018 at 4:30
  • No, the site has a valid certificate. It seems that there is an invalid certificate installed on my PC. (I've never had to select a certificate for an HTTPS site before?)
    – Daniel Gee
    Nov 12, 2018 at 7:57
  • @garethTheRed, brilliant, thank you. Can you post your answer as an answer so that I can mark it as a solution?
    – Daniel Gee
    Nov 12, 2018 at 8:19

1 Answer 1

4

You have accidentally configured client authentication on your IIS server. The server now expects your browser to send a certificate to the server in order to authenticate you.

Start the IIS Management Console and with your site selected in the left-hand pane, open the SSL Settings page.

You need to have Require SSL checked in order to enable SSL/TLS on the server (for HTTPS) and also need to ensure that Client certificates: is set to Ignore so that IIS doesn't instruct the browser to send a client authentication certificate.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .