Article ID: 841641 - Last Review: November 21, 2006 - Revision: 1.1

IIS returns a "403.13 Client Certificate Revoked" error message after you install MS04-011 because of Wininet proxy settings

Retired KB ArticleRetired KB Content Disclaimer
View products that this article applies to.
System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.
Expand all | Collapse all

SYMPTOMS

When you access a Web site that is set to require client certificates, you may receive the following HTTP error message, even if you are sure that the client certificate has not been revoked:
403.13 Client Certificate Revoked
Back to the top

CAUSE

Winhttp.dll may prevent the retrieval of the Wininet proxy settings if all the following conditions are true:
  • The server is configured with Internet Information Services (IIS) services.
  • The server is running under the Local System account.
  • The browser (Wininet) proxy settings have been manually configured.
If you do not have the Web Proxy Auto-Discovery (WPAD) configured, Microsoft Cryptography API (CAPI) cannot download Certificate Revocation Lists (CRLs) because CAPI cannot find proxy settings. Also, after you apply the MS04-011 security update, CAPI uses the Winhttp.dll file instead of the Wininet.dll file. Therefore, CAPI does not support WPAD when you use scripts that are not based on JavaScript.
Back to the top

RESOLUTION

To resolve this problem, you can use the Proxycfg.exe file to manually configure the proxy settings for the computer. For example, run either of the following commands to import from the user's browser settings:
proxycfg.exe -p itgproxy:80
proxycfg.exe -u
The Proxycfg.exe file is available from the Platform Software Development Kit (SDK).
Back to the top

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Back to the top

REFERENCES

For additional information, click the following article numbers to view the articles in the Microsoft Knowledge Base:
841642  (http://support.microsoft.com/kb/841642/ ) Errors with client certificates occur after you install the MS04-011 security update on an IIS 5.0 computer
841632  (http://support.microsoft.com/kb/841632/ ) You receive a "403.13 client certificate revoked" error message after you install the MS04-11 security update
Back to the top
APPLIES TO
  • Microsoft Internet Information Services 5.0
Back to the top
Keywords: 
kbprb KB841641
Back to the top
Retired KB ArticleRetired KB Content Disclaimer
This article was written about products for which Microsoft no longer offers support. Therefore, this article is offered "as is" and will no longer be updated.
Back to the top