Tim Huffam

The following error may occur when trying to use a client cert for the first time (this error is from IIS 5):

The page requires a valid client certificate

The page you are trying to view requires the use of a valid client certificate. Your client certificate was revoked, or the revocation status could not be determined. The certificate is used for authenticating you as a valid user of the resource.

HTTP 403.13 - Forbidden: Client certificate revoked

The cause of this is usually  "the revocation status could not be determined.".  This is because CRL (certificate revocation list) checking has not been setup on the server. 

The simple solution for this (for development), is to just disable CRL checking.

You can do this using an IIS metabase tool (eg IIS Metabase Explorer) or adsutil, or, if you dont have these tools installed, you can run some VBScript to disable it - and this is how:

1. Create a VBScript file with the following code:
   

   Set oWeb = GetObject("IIS://localhost/W3SVC")
   oWeb.CertCheckMode = 1
   oWeb.SetInfo
   Set oWeb = Nothing

2. Save it to a .vbs file eg c:\turnoffcrlcheck.vbs
3. Execute the script at the command prompt eg:

cscript.exe turnoffcrlcheck.vbs

And that's it.  You should not need to restart IIS.

HTH

Tim