Prevent browser from prompting for client certificate for IIS app

Question

We have an application deployed to IIS and every time we connect to it, we get the following browser prompt:

Select a certificate to authenticate yourself to sitename

We do not have a reason to challenge for a client certificate and seems like this setting was introduced by mistake

How can we remove it?

Research:

• This question on How can I prevent browsers from prompting Users for a Client Certificate? looks similar, but doesn't have an answer yet, and also is about setting this up on kestrel-http-server

• This question on Browser is not prompting for a client certificate is for how to make sure there is a prompt, and didn't provide enough hints as to how to prevent one

Answer 1

1. Open IIS and navigate to your web site or application and go to the SSL settings

   

2. Set the Client Certificate setting to "Ignore"

   

   Both 'Accept' and 'Require' will both challenge for a client side cert

3. Recycle your app pool and re-launch your browser to test

Note: SSL settings are inherited from your Site > Application, so you may need to apply these SSL Settings at multiple levels

Further Reading:

• Why does google chrome prompts to "select a certificate to authenticate yourself"
• How to prevent browser from prompting for a client certificate and allow the IIS to accept it (not require it)?