Error message when you visit a Web site that is hosted on IIS 7.0: "HTTP Error 403.12 - Client Certificate Denied"


Symptoms


When you visit a Web site that is hosted on Internet Information Services (IIS) 7.0, you receive an error message that resembles the following:
Server Error in Application "Application_Name"
HTTP Error 403.12 - Client Certificate Denied
HRESULT: 0x80070005
Description of HRESULT
Access is denied.
This problem occurs when the client certificate mapping setting is enabled in IIS.

Cause


This problem occurs because the Windows user account that is configured for client certificate mapping does not have the Read permission for the requested file.

Resolution


To resolve this issue, follow these steps:
  1. Open the folder that contains the requested file.
  2. Right-click the requested file, and then click Properties.
  3. In the File_Name Properties dialog box, click the Security tab.
  4. On the Security tab, click Edit.
  5. In the Permissions for File_Name dialog box, locate Group or user names, and then click the Windows user account that is configured for client certificate mapping.
  6. Under Permissions for Windows_User_Acount, click to select the Allow check box for the Read permission, and then click OK.
  7. In the File_Name Properties dialog box, click OK.
  8. Repeat step 2 through step 7 if you want to grant the Read permission for other files to the Windows user account.