I have a wildcard SSL certificate (from GoDaddy.com) deployed to several Windows 2003 servers. I used IIS management console to import the certificate. The problem is that only one of these servers enables the certificate for client authentication. As a result, our custom application can access SOAP service only on a single server.

Question: what can I do to enable client authentication on other servers?


Client authentication in SSL is not correlated with whatever is in the server's certificate. That the server certificate is wildcard or not has no bearing on whether client authentication will be used or not.

Client certificates will be used only if the server asks for them. Then, the server must be able to validate the certificate (make sure that the certificate is genuine, and comes more or less directly from a trusted root), and then to extract a notion of identity from what is in the certificate. In the IIS / Active Directory world, this is called mapping. See this page for some details.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.