Get a client certificate to register a page

Question

I want to make a registration page for customers, which will contain only the registration of buttons and deregistration. When a user clicks on either of these two buttons, he will be asked to select a client certificate on his computer. I would also like to extract the email address from the selected certificate.

Is there a way to declaratively configure IIS 7 to require a client certificate for only one .aspx page on a website. I could then extract the certificate from Request.ClientCertificate, right?

Answer 1

The client certificate is sent by the browser only in case of HTTPS. Therefore, you first need to install the server certificate on your web server in order for HTTPS to work.

Then I do not think that you can force the use of SSL and a client certificate on the same page, but you can create a subdirectory of your site where you enable SSL and require a client certificate. Then you put only your special registration page in this subdirectory and link to it using your registration button.

The rest of your site may be anonymous HTTP.