Securing with certificates¶
Introduction¶
This is a very rough guide. For more details, there is a lot of help material provided by Microsoft.
Install IIS Client Certificate Mapping feature¶
To use the certificate mapping the feature needs to be installed.
Configuring Web Page for REST-API¶
To enable certificate mapping the REST-API needs to be installed in its own web site. This is necessary because all authentication methods need to be disabled. The TcPCM rich client is using a SOAP based interface (Windows Communication Foundation) that needs anonymous authentication on the IIS level. Because the soap interface is checking for certificates on a deeper level.
SSL Settings¶
Disable all authentication methods¶
Enable certificate mapping¶
After disabling all authentication methods the certificate mapping needs to be enabled in the configuration editor.