HTTP error 403.7 when you run a web application that's hosted on a server that is running IIS 7.0
Article
In this article
This article helps you resolve the problem where
HTTP Error 403.7
may be thrown when you run a web application that is hosted on a server that is running Microsoft Internet Information Services (IIS) 7.0.
Original product version:
Internet Information Services 7.0
Original KB number:
942067
Symptoms
When you try to run a Web application that is hosted on a server that is running IIS 7.0, you may receive the following error message:
Server Error in Application "
ApplicationName
"
HTTP Error 403.7 - Forbidden
HRESULT: 0x80070005
Description of HRESULT The page you are attempting to access requires your browser to have a Secure Sockets Layer (SSL) client certificate that the Web server recognizes.
Cause
This problem occurs because the
Require SSL
option is selected. This option appears on the
SSL Settings
page of IIS Manager. When this option is selected, all requests that client computers make to the Web application must use a Secure Sockets Layer (SSL) connection.
Additionally, the
Require
option of the
Client certificates
feature is selected. This option also appears on the
SSL Settings
page of IIS Manager. When this option is selected, all client computers that send requests to the server that is running IIS must have valid client certificates.
To resolve this problem, use one of the following methods.
Resolution 1: Configure a client certificate on a client computer
The client certificate is issued by a certification authority that is trusted by the server that is running IIS.
Resolution 2: Change Require option to Accept
If you don't require that users have client certificates to run the Web application, use the
Accept
option instead of the
Require
option of the
Client certificates
feature. You can change this setting on the
SSL Settings
page for the Web application in IIS Manager. To do this, follow these steps:
On the computer that is running IIS 7.0, select
Start
, type
inetmgr
in the
Start Search
box, right-click
Inetmgr
in the
Programs
list, and then select
Run as administrator
.
If you're prompted for an administrator password or for a confirmation, type your password, or select
Continue
.
In IIS Manager, locate the Web application for which you want to change the SSL setting.
In
Features View
, double-click
SSL Settings
.
On the
SSL Settings
page, select the
Accept
option under
Client certificates
.
