IIS Filter Client Certificate by Issuer or Keyword

Question

I am working on a local web application in which I have set sslFlags to SslRequireCert in the IIS config file, which asks for the client certificates for authentication.

The web browser shows a list of available certificates (refer to the attached image). Is there a way where I can filter the certificate based on the issuer or identity keyword? The problem statement is that I do not want the website to list all the certificates but limit it to only the relevant certificates which the user can select.

Please help me out!

Refer to Image

Answer 1

You can use IIS Client Certificate Mapping Authentication to filter certificates. Follow this microsoft official documentation on how to do it: click here

Here's how to configure client certificate mapping authentication in the IIS interface.(Default web site as an example)

1.Go to Default Web Site ? Configuration Editor

2.Select section: system.webServer/security/authentication/iisClientCertificateMappingAuthentication

3.Change Enable to True and click the "..." button of manyToOneMappings to add a many-to-one rule.

4.Click Add and fill in the properties.

5.After the configuration is complete, close the window, you will see that the count of manyToOneMappings becomes 1, and then click Apply to save the configuration.

You can refer to this answer: Configure IIS to accept or filter user certificate by specific issuer