Groups | Blog | Home
all groups > iis security > august 2007 >

iis security : Enable client certificate based authentication for certain urls


Kshitiz
8/22/2007 10:04:03 AM
Hi All,

I want to allow anonymous access to my webserver. However I want certain
urls to be allowed only after client certificate based authentication. I read
many documents on client certificate based authentication and access control.
But I did not exact information I am looking for.

Thanks,
Ken Schaefer
8/23/2007 12:00:00 AM
For those URLs, enable SSL/TLS, and then check the Client Certificates -
Required, checkbox.

Cheers
Ken


[quoted text, click to view]
Kshitiz
8/23/2007 2:44:01 AM
How do I specify those URLs under Default Website?

[quoted text, click to view]
Ken Schaefer
8/27/2007 12:00:00 AM
Right-click the document in IIS Manager -> Properties -> Security Tab

Cheers
Ken

[quoted text, click to view]
Kshitiz
8/27/2007 2:48:00 AM
Hi Ken,

Let me put some details around my requirement..

I have a application deployed. This can service mutiple URLs. say
1)/abc
2)/xyz
3) ....(many more)
Now I want anonymous access to /abc.
However when anyone acceses /xyz url, I want them to go through client
authentication.

How do I achieve that?

Thanks,
Kshitiz


[quoted text, click to view]
Ken Schaefer
8/27/2007 10:34:10 PM
Open IIS Manager, locate the resource you wish to secure, right-click and
choose Properties, go to the Directory Security tab (it's just called
"Security" if you selected a file not a folder), and click the "Edit" button
under SSL.

There is a checkbox for "Require Client Certificates" or similar.

Cheers
Ken

[quoted text, click to view]
AddThis Social Bookmark Button