asp.net - Configuring IIS Client Certificate Mapping Authentication -

asp.net - Configuring IIS Client Certificate Mapping Authentication -

i'm trying configure iis client cert mapping on iis 8, windows server 2012. don't see configuration showing in applicationhost.config, , cert i'm trying nowadays isn't offered alternative browser.

here's i've tried far:

in iis, created top-level site called "packagemanager":

ssl settings follows:

authentication: enabled anonymous:

in configuration editor, section: system.webserver/security/authentication/iisclientcertificatemappingauthentication from: applicationhost.config <location path=’packagemanager’> set following:

i wanted manytoonemappings map cert service business relationship (a domain user):

here created 2 rules match subject , issuer cn's of godaddy cert:

then generated powershell script above follows:

set-webconfigurationproperty -pspath 'machine/webroot/apphost' -location 'packagemanager' -filter "system.webserver/security/authentication/iisclientcertificatemappingauthentication" -name "enabled" -value "true" set-webconfigurationproperty -pspath 'machine/webroot/apphost' -location 'packagemanager' -filter "system.webserver/security/authentication/iisclientcertificatemappingauthentication" -name "defaultlogondomain" -value "cmc" add-webconfigurationproperty -pspath 'machine/webroot/apphost' -location 'packagemanager' -filter "system.webserver/security/authentication/iisclientcertificatemappingauthentication/manytoonemappings" -name "." -value @{name='my 1st mapping';description='1st user mapping';username='domain\username';password='xxxxxxxxxxx'} add-webconfigurationproperty -pspath 'machine/webroot/apphost' -location 'packagemanager' -filter "system.webserver/security/authentication/iisclientcertificatemappingauthentication/manytoonemappings/add[@name='my 1st mapping']/rules" -name "." -value @{certificatefield='subject';certificatesubfield='cn';matchcriteria='*.mydomain.com';comparecasesensitive='false'} add-webconfigurationproperty -pspath 'machine/webroot/apphost' -location 'packagemanager' -filter "system.webserver/security/authentication/iisclientcertificatemappingauthentication/manytoonemappings/add[@name='my 1st mapping']/rules" -name "." -value @{certificatefield='issuer';certificatesubfield='cn';matchcriteria='go daddy secure certificate authorization - g2';comparecasesensitive='false'}

what’s weird above, don’t see references configuration in c:\windows\system32\inetsrv\config\applicationhost.config.

when browsing site, prompted utilize cert, ie doesn't nowadays cert expecting:

that self-signed cert had been experimenting with.

then nail lovely 403, i’m @ impasse.

what doing wrong in config doesn't show in applicationhost.config, , why not given selection nowadays client cert (it's in store)?

i experienced same problem under windows server 2012 , solved adding 2 additional registry keys under hkey_local_machine\system\currentcontrolset \control\securityproviders\schannel:

• clientauthtrustmode value type: reg_dword, value data: 2

• sendtrustedissuerlist value type: reg_dword, value data: 0

for more info see iis 8.5 - mutual certificates authentication fails error 403.16

asp.net authentication iis ssl x509certificate