Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a wildcard SSL certificate (from deployed to several Windows 2003 servers. I used IIS management console to import the certificate. The problem is that only one of these servers enables the certificate for client authentication. As a result, our custom application can access SOAP service only on a single server.

Question: what can I do to enable client authentication on other servers?

share|improve this question

Client authentication in SSL is not correlated with whatever is in the server's certificate. That the server certificate is wildcard or not has no bearing on whether client authentication will be used or not.

Client certificates will be used only if the server asks for them. Then, the server must be able to validate the certificate (make sure that the certificate is genuine, and comes more or less directly from a trusted root), and then to extract a notion of identity from what is in the certificate. In the IIS / Active Directory world, this is called mapping. See this page for some details.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.