Question

我正在尝试在IIS 8，Windows Server 2012上配置IIS客户端证书映射。我没有看到配置显示在applicationHost.config中，并且我试图提供的证书不提供为我的浏览器选项。

这是我到目前为止所尝试的内容：

在IIS中，我创建了一个名为“PackageManager”的顶级网站：

enter image description here

SSL设置如下：

enter image description here

身份验证：已启用匿名：

enter image description here

在配置编辑器中，部分：system.webServer/security/authentication/iisClientCertificateMappingAuthentication 来自：ApplicationHost.config <location path=’PackageManager’> 我设置了以下内容：

enter image description here

我想要manyToOneMappings所以我可以将证书映射到我的服务帐户（域用户）：

enter image description here

在这里，我创建了2条规则来匹配GoDaddy证书的主题和发行人CN：

enter image description here

然后我为以上所有内容生成了一个PowerShell脚本：

Set-WebConfigurationProperty -pspath 'MACHINE/WEBROOT/APPHOST' -location 'PackageManager' -filter "system.webServer/security/authentication/iisClientCertificateMappingAuthentication" -name "enabled" -value "True"
Set-WebConfigurationProperty -pspath 'MACHINE/WEBROOT/APPHOST' -location 'PackageManager' -filter "system.webServer/security/authentication/iisClientCertificateMappingAuthentication" -name "defaultLogonDomain" -value "CMC"

Add-WebConfigurationProperty -pspath 'MACHINE/WEBROOT/APPHOST' -location 'PackageManager' -filter "system.webServer/security/authentication/iisClientCertificateMappingAuthentication/manyToOneMappings" -name "." -value @{name='My 1st Mapping';description='1st User Mapping';userName='DOMAIN\username';password='XXXXXXXXXXX'}

Add-WebConfigurationProperty -pspath 'MACHINE/WEBROOT/APPHOST' -location 'PackageManager' -filter "system.webServer/security/authentication/iisClientCertificateMappingAuthentication/manyToOneMappings/add[@name='My 1st Mapping']/rules" -name "." -value @{certificateField='Subject';certificateSubField='CN';matchCriteria='*.mydomain.com';compareCaseSensitive='False'}

Add-WebConfigurationProperty -pspath 'MACHINE/WEBROOT/APPHOST' -location 'PackageManager' -filter "system.webServer/security/authentication/iisClientCertificateMappingAuthentication/manyToOneMappings/add[@name='My 1st Mapping']/rules" -name "." -value @{certificateField='Issuer';certificateSubField='CN';matchCriteria='Go Daddy Secure Certificate Authority - G2';compareCaseSensitive='False'}

上述所有内容有点奇怪，我在C：\ Windows \ System32 \ inetsrv \ Config \ applicationHost.config中看不到对此配置的任何引用。

浏览此站点时，系统会提示我使用证书，但IE不提供我期望的证书：

enter image description here