IIS ERROR 403 7 5 Forbidden because a client certificate is required

[dinod...@community.nospam]

Dear newsgroup,

We have a problem with SSL certificate autentification.
We have an asp.net solution in our IIS server and we use SSL certifiacte
autentification.
All is ok for the 99% of users but we have an user (important company) that
cannot use our web because IIS ask double times for the certificate and then
don't show the page.
thye error in the log is:

IIS ERROR 403 7 5 Forbidden because a client certificate is required.

If i use user and password autentification all is ok.

[WenJun Zhang[msft]]

Hi,

Please ask the user to open his IE Internet options->content->certificates.
In the personal tab, has his client certificate be properly listed? Also
please ensure the words 'You have a private key that corresponds to this
certificate.' exist. This means the cert's priviate key is correctly
installed which is required for SSL handshake.

I look forward to your update.

Have a nice weekend.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msd...@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subscriptions/aa948868.aspx#notifications.

MSDN Managed Newsgroup support offering is for non-urgent issues where an
initial response from the community or a Microsoft Support Engineer within
2 business day is acceptable. Please note that each follow up response may
take approximately 2 business days as the support professional working with
you may need further investigation to reach the most efficient resolution.
The offering is not appropriate for situations that require urgent,
real-time or phone-based interactions. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/en-us/subscriptions/aa948874.aspx
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[dinod...@community.nospam]

Hi,

The user have in the personal TAB the certificate and we find the words

'You have a private key that corresponds to this certificate.

I think the problem is a proxy or a firewal problem because if the user try
our internet page with another internet access all its ok.
""WenJun Zhang[msft]"" <wjz...@online.microsoft.com> ha scritto nel
messaggio news:oH$YU4zkJ...@TK2MSFTNGHUB02.phx.gbl...

[WenJun Zhang[msft]]

Hi,

Thanks for the update. If there is any further issue we can assist on IIS
side, please don't hesitate to follow up here.

Have a nice day.

[dinod...@community.nospam]

The problem is not solved because they have to use the other internet
access.

Thank's

""WenJun Zhang[msft]"" <wjz...@online.microsoft.com> ha scritto nel

messaggio news:T%23Ubnykl...@TK2MSFTNGHUB02.phx.gbl...

[Daniel Crichton]

This suggests that the problem is at their end with their firewall and/or
connection configuration, there is nothing you can do in your IIS settings
if the client certificate is being removed by something at their end.

Dan