Error message when you visit a Web site that is hosted on IIS 7.0: "HTTP Error 403.16 - Forbidden"

You have a Web site that is hosted on Internet Information Services (IIS) 7.0. When you visit the Web site in a Web browser, you may receive an error message that resembles the following:

This problem occurs because the root certificate of the certification authority is not in the Trusted Root Certification Authorities certificate store on the IIS Web server.

Note The root certificate of the certification authority is used to issue the client certificate.

On the IIS Web server, install the root certificate of the certification authority in the Trusted Root Certification Authorities certificate store. To do this, follow these steps:

1. On the IIS Web server, click Start, type mmc.exe in the Start Search box, right-click mmc.exe, and then click Run as administrator.
   
   Note If you are prompted for an administrator password or for a confirmation, type the password, or click Continue.
2. On the File menu, click Add/Remove Snap-in.
3. Under Available snap-ins, click Certificates, and then click Add.
4. Click Computer account, and then click Next.
5. Click Local computer, click Finish, and then click Close.
6. To exit the wizard, click OK.
7. Expand Certificates, expand Trusted Root Certification Authorities, right-click Certificates, point to All Tasks, and then click Import.
8. In the Certificate Import Wizard, click Next.
9. In the File name box, type the location of the root certificate of the certification authority, and then click Next.
10. Click Next, and then click Finish.