How to Create Client Side Certificates
Client-side certificates are advantageous for security across a network. Client-side certificates are created on a Web server and requested by the client computer. Security is enhanced, because the client is assured the information sent is encrypted with a digital signature that can only be used by the host domain server. If the information is intercepted, the data is gibberish to the reader without the key. For administrators to distribute certificates, a few steps are needed on the Internet Information Service console.
Instructions
-
Create Client Certificate Authentication
-
1
Click the Windows "Start" button and select "Settings." In the menu, select "Control Panel."
-
2
Double-click the "Administrative Tasks" icon.
-
-
3
Double-click the "Internet Information Service" icon.
-
4
Right-click the Web server virtual directory and select "Properties."
-
5
Click the "Directory Security" tab.
-
6
Click the "Edit" button in the "Secure communications" section.
-
7
Check the box that indicates "Require secure channel (SSL)." This enables encryption requirements when a user accesses the directory.
-
8
Check the "Require client certificates" and the "Enable client certificate mapping" check boxes.
-
9
Click the "Edit" button.
-
10
Select the "Many-to-1" tab.
-
11
Click the "Add" button. In the window that appears, enter a name for the new encryption rule. Once the name is entered, click "Next."
-
12
Enter the organization name and click the "OK" button.
-
13
Click "Accept this certificate for Logon Authentication" when the mapping window appears.
-
14
Click the "Finish" button.
-
15
Click "OK" and close the window.
Test the Configuration
-
16
Open your Web browser and navigate to the secure Web directory. The address looks similar to the one below:
https://localhost/mySecurityDirectory/mySecurePage.aspx -
17
Receive a message for a secure certificate validation. The message saying that a certificate is needed to communicate with the application should be displayed to the user.
-
18
Close the browser.
-
1