Wednesday, 11 May 2016

Client Certificates and Windows 10

I thought that my upgrade from Windows 7 to Windows 10 was all smooth and everything seemed pretty sweet but it was annoying that some things were not retained when upgrading.

For instance, all the User Account Control was turned back on which is a real pain for a Developer, having to remember to run things as Administrator otherwise all kinds of weird things happen.

I also found that certain of my sites had stopped working when debugging them. This was a real pain to debug.

What had happened when I had upgraded Windows was both that I needed to run the browser as an Admin but that didn't explain why I couldn't access a web service on a test server (although I could using SvcUtil.exe!). This was because the permissions on the private key for the client certificate were reset somehow during the upgrade so although it should have been sent to the other site automatically, it wasn't permitted but without any error.

I had to open mmc.exe, right-click the certificate and choose Tasks->Manage private keys and then add IIS_IUSRS read permission on the private key.

I still have a problem with calling the web service from a web site, but I will have to try and fix that separately!
Post a Comment