Windows 10: Windows 10 https + client certificate

Hi

I have a windows 10 enterprise, and I have got some odd behaviour.


Whenever I attempt to access a site that uses https and client certificate authentication I get a 403 forbidden error.


This happens for multiple different sites with multiple different certificates.


My certificates are all fully trusted and in my local user store.


The certificates work on other non windows 5 machines, and we have been able to see on one machine that the https handshake is successful its failing at the client.

:)

 

Windows 10 Https with client certificate

Hi

I have a windows 10 enterprise, and I have got some odd behaviour.

Whenever I attempt to access a site that uses https and client certificate authentication I get a 403 forbidden error. This happens for multiple different sites with multiple different certificates.

My certificates are all fully trusted and in my local user store.

The certificates work on other non windows 10 machines, and we have been able to see on one machine that the https handshake is successful its failing at the client.

 

Windows 10 Https with client certificate

Hi

Thanks for that, I have asked the question on tech net. The problem is not one of security on the website or directory as the error is a 403.7 with the certificate. Addtionally the same certificate and credentials work on other machines.

Thanks though for the suggestion about technet

Ben

 

Certificate Templates on the client side

Hi,

Good day to you all! I hope this is the right place to ask this.

I have a few questions related to how certificate templates are being stored and distributed under AD CS:

• How do the clients get a list of applicable certificate templates from the enterprise CA, which is shown at the time when a new manual certificate enrollment is performed (e.g., someone goes to certmgr and request for a new certificate)?
• How are certificate templates being stored on both the CA side and the client side? Is there a directory that the templates reside in? Or are they just a collection of Windows registries (e.g. Software\Microsoft\Cryptography\CertificateTemplateCache
  under HKCU and HKLM)?
• Is it possible to programmatically read and parse certificate templates on the client side, ideally via some Microsoft provided public API? I am asking this because sometimes it is useful to check, verify and debug that
  
  a) clients are getting all the expected templates;
  
  b) the content of templates are as expected (particularly useful if there were templates of duplicated names, or an old template has its setting changed but the name is kept);
  
  c) applicable clients are indeed getting the same list of templates.

Please bear with me as I am a rookie to AD CS.

Thanks!