iis security: Hi there,

Can anyone give me a quick tutorial on creating a self-signed client
certificate in win2K3 / IIS6, please? I have just been handed a
project with a dealine of uesterday that requires client certificate
authentication. Any help is greatfully accepted.

TIA

Hi Marc,

This kb article contains the direction resources for you on how to obtain
one test client certificate:
216907 HOW TO: Obtain a Test Certificate or a Test Client Authentication
http://support.microsoft.com/?id=216907

Please feel free to let me know if any question. It is my pleasure to be of
any assistance.

Best Regards,
Wei-Dong XU
Microsoft Product Support Services
This posting is provided "AS IS" with no warranties, and confers no rights.

SelfSSL should set up your IIS machine to handle client cert authentication.
http://www.microsoft.com/downloads/details.aspx?FamilyID=56fc92ee-a71a-4c73-b628-ade629c89499&DisplayLang=en

To get rid of the security popup of the browser, you will need to sign with
a certificate that the client trusts. This is accomplished by either
purchasing a SSL Certificate (verisign, thawte, et al have their
certificates in the client's trusted store), or you somehow the server's
cert into the client's trusted store.

Obviously, for testing purposes, SelfSSL + manual registration of the cert
into the client's trusted store is the cheap way to go. For real deployment,
real signed certificate is the easy way to go (unless you control all the
client browsers and can deploy your self-signed cert into their trusted
store).

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
[quoted text, click to view]
Hi there,

Can anyone give me a quick tutorial on creating a self-signed client
certificate in win2K3 / IIS6, please? I have just been handed a
project with a dealine of uesterday that requires client certificate
authentication. Any help is greatfully accepted.

TIA
Marc.