FIX: "HTTP 403 (Forbidden)" when a client HTTPS request is sent to a Web application or a Web service in IIS 7.5 or IIS 8.0 and uses a self-signed certificate

Applies To
Internet Information Services 8.0

Symptoms

Consider the following scenario:

  • You install a custom certificate validation module in Internet Information Services (IIS) 7.5 or IIS 8.0.
  • You host a Web application or Web service that accepts a self-signed certificate for validation in IIS.
  • An HTTPS request that uses a self-signed certificate from a client computer is sent to the Web application or Web service.

In this scenario, the client computer may receive an "HTTP 403 (Forbidden)" error message.

Cause

This issue occurs because IIS rejects the self-signed certificate before it reaches the custom certificate validation module.

Note This issue typically occurs when you use a large-sized certificate.

Resolution

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix Download Available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website:

http:⁠//support.microsoft.com/contactus/?ws=support Note The "Hotfix Download Available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

For IIS 7.5

To apply this hotfix, you must have IIS 7.5 installed on a computer that is running one of the following operating systems:

  • Windows 7
  • Windows 7 Service Pack 1 (SP1)
  • Windows Server 2008 R2
  • Windows Server 2008 R2 Service Pack 1 (SP1)

For IIS 8.0

To apply this hotfix, you must have IIS 8.0 installed on a computer that is running one of the following operating systems:

  • Windows 8
  • Windows Server 2012

Restart requirement

You must restart the computer if IIS is running when you apply this hotfix.

Hotfix replacement information

This hotfix does not replace a previously released hotfix.

File information

The global version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported x86-based versions of Windows 7

File name File version File size Date Time Platform
Hwebcore.dll 7.5.7600.17133 12,800 1-Oct-12 15:48 x86
Iiscore.dll 7.5.7600.17133 197,632 1-Oct-12 16:49 x86
W3dt.dll 7.5.7600.17133 24,064 1-Oct-12 15:49 x86
Hwebcore.dll 7.5.7600.21333 12,800 29-Sep-12 15:44 x86
Iiscore.dll 7.5.7600.21333 200,192 29-Sep-12 16:44 x86
W3dt.dll 7.5.7600.21333 24,064 29-Sep-12 15:44 x86
Hwebcore.dll 7.5.7601.17963 12,800 1-Oct-12 15:41 x86
Iiscore.dll 7.5.7601.17963 198,144 1-Oct-12 16:40 x86
W3dt.dll 7.5.7601.17963 24,064 1-Oct-12 15:41 x86
Hwebcore.dll 7.5.7601.22123 12,800 29-Sep-12 15:29 x86
Iiscore.dll 7.5.7601.22123 200,192 29-Sep-12 16:28 x86
W3dt.dll 7.5.7601.22123 24,064 29-Sep-12 15:29 x86

For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

File name File version File size Date Time Platform
Hwebcore.dll 7.5.7600.17133 15,360 1-Oct-12 17:46 x64
Iiscore.dll 7.5.7600.17133 313,856 1-Oct-12 17:46 x64
W3dt.dll 7.5.7600.17133 31,744 1-Oct-12 17:52 x64
Hwebcore.dll 7.5.7600.21333 15,360 29-Sep-12 17:25 x64
Iiscore.dll 7.5.7600.21333 314,880 29-Sep-12 17:26 x64
W3dt.dll 7.5.7600.21333 31,744 29-Sep-12 17:31 x64
Hwebcore.dll 7.5.7601.17963 15,360 1-Oct-12 17:37 x64
Iiscore.dll 7.5.7601.17963 300,544 1-Oct-12 17:37 x64
W3dt.dll 7.5.7601.17963 32,256 1-Oct-12 17:41 x64
Hwebcore.dll 7.5.7601.22123 15,360 29-Sep-12 17:40 x64
Iiscore.dll 7.5.7601.22123 315,392 29-Sep-12 17:40 x64
W3dt.dll 7.5.7601.22123 32,256 29-Sep-12 17:45 x64

For all supported IA-64-based versions of Windows Server 2008 R2

File name File version File size Date Time Platform
Hwebcore.dll 7.5.7600.17133 37,376 1-Oct-12 16:34 IA-64
Iiscore.dll 7.5.7600.17133 573,952 1-Oct-12 16:34 IA-64
W3dt.dll 7.5.7600.17133 52,736 1-Oct-12 16:42 IA-64
Hwebcore.dll 7.5.7600.21333 37,376 29-Sep-12 16:27 IA-64
Iiscore.dll 7.5.7600.21333 581,632 29-Sep-12 16:27 IA-64
W3dt.dll 7.5.7600.21333 52,736 29-Sep-12 16:33 IA-64
Hwebcore.dll 7.5.7601.17963 37,376 1-Oct-12 16:26 IA-64
Iiscore.dll 7.5.7601.17963 575,488 1-Oct-12 16:27 IA-64
W3dt.dll 7.5.7601.17963 52,736 1-Oct-12 16:32 IA-64
Hwebcore.dll 7.5.7601.22123 37,376 29-Sep-12 16:34 IA-64
Iiscore.dll 7.5.7601.22123 582,144 29-Sep-12 16:34 IA-64
W3dt.dll 7.5.7601.22123 52,736 29-Sep-12 16:40 IA-64

For all supported x86-based versions of Windows 8

File name File version File size Date Time Platform
Hwebcore.dll 8.0.9200.16432 14,336 10-Oct-12 6:30 x86
Iiscore.dll 8.0.9200.16432 206,336 10-Oct-12 6:30 x86
W3dt.dll 8.0.9200.16432 25,600 10-Oct-12 6:31 x86
Hwebcore.dll 8.0.9200.20533 14,336 10-Oct-12 6:43 x86
Iiscore.dll 8.0.9200.20533 206,336 10-Oct-12 6:43 x86
W3dt.dll 8.0.9200.20533 25,600 10-Oct-12 6:44 x86

For all supported x64-based versions of Windows 8 and Windows Server 2012

File name File version File size Date Time Platform
Hwebcore.dll 8.0.9200.16432 16,896 10-Oct-12 7:04 x64
Iiscore.dll 8.0.9200.16432 318,976 10-Oct-12 7:04 x64
W3dt.dll 8.0.9200.16432 39,424 10-Oct-12 7:04 x64
Hwebcore.dll 8.0.9200.20533 16,896 10-Oct-12 7:16 x64
Iiscore.dll 8.0.9200.20533 318,976 10-Oct-12 7:16 x64
W3dt.dll 8.0.9200.20533 39,424 10-Oct-12 7:17 x64

Additional file information

Additional file information for Windows 7 and for Windows Server 2008 R2

Additional files for all supported x86-based versions of Windows 7

File name Update.mum
File version Not Applicable
File size 3,288
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name X86_16c40cfb0553320201a9516c6b418272_31bf3856ad364e35_6.1.7600.21333_none_3b02ff940e9924f8.manifest
File version Not Applicable
File size 705
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name X86_8da928bef21d8d7808ef7aeee6926905_31bf3856ad364e35_6.1.7600.17133_none_b71a709d2b21533e.manifest
File version Not Applicable
File size 705
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name X86_a87e19d1cafed07c5acee30208af93ed_31bf3856ad364e35_6.1.7601.17963_none_d04b1d36617df4a1.manifest
File version Not Applicable
File size 705
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name X86_fc9390e976c9cb57127ea968d51bf044_31bf3856ad364e35_6.1.7601.22123_none_4b2ad2f1b7b1c5b3.manifest
File version Not Applicable
File size 705
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17133_none_cfb452be8a71b37e.manifest
File version Not Applicable
File size 10,228
Date (UTC) 01-Oct-2012
Time (UTC) 17:17
Platform Not Applicable
File name X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21333_none_d03df16fa38f506f.manifest
File version Not Applicable
File size 10,228
Date (UTC) 29-Sep-2012
Time (UTC) 17:59
Platform Not Applicable
File name X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17963_none_d17a69c487b03d22.manifest
File version Not Applicable
File size 10,228
Date (UTC) 01-Oct-2012
Time (UTC) 17:12
Platform Not Applicable
File name X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22123_none_d22f1e61a0ada06a.manifest
File version Not Applicable
File size 10,228
Date (UTC) 29-Sep-2012
Time (UTC) 17:00
Platform Not Applicable

Additional files for all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

File name Amd64_23731bd974f6f71be47385b3ce6428c4_31bf3856ad364e35_6.1.7601.22123_none_2f15b44cbd2130f6.manifest
File version Not Applicable
File size 1,060
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name Amd64_2d402ef2a908f8d2dd9149fef64e9d7f_31bf3856ad364e35_6.1.7600.17133_none_ea36ea0312480248.manifest
File version Not Applicable
File size 1,060
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name Amd64_982a1283a7dd3d9cb66618d57bacb301_31bf3856ad364e35_6.1.7600.21333_none_611fb332d1497b7f.manifest
File version Not Applicable
File size 1,060
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name Amd64_affff66f55ebbdac34ba581047a3e6c5_31bf3856ad364e35_6.1.7601.17963_none_be03a951bbb6a048.manifest
File version Not Applicable
File size 1,060
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17133_none_2bd2ee4242cf24b4.manifest
File version Not Applicable
File size 10,236
Date (UTC) 01-Oct-2012
Time (UTC) 18:21
Platform Not Applicable
File name Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21333_none_2c5c8cf35becc1a5.manifest
File version Not Applicable
File size 10,236
Date (UTC) 29-Sep-2012
Time (UTC) 18:19
Platform Not Applicable
File name Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17963_none_2d990548400dae58.manifest
File version Not Applicable
File size 10,236
Date (UTC) 01-Oct-2012
Time (UTC) 18:12
Platform Not Applicable
File name Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22123_none_2e4db9e5590b11a0.manifest
File version Not Applicable
File size 10,236
Date (UTC) 29-Sep-2012
Time (UTC) 19:31
Platform Not Applicable
File name Update.mum
File version Not Applicable
File size 3,730
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17133_none_36279894772fe6af.manifest
File version Not Applicable
File size 7,906
Date (UTC) 01-Oct-2012
Time (UTC) 17:12
Platform Not Applicable
File name Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21333_none_36b13745904d83a0.manifest
File version Not Applicable
File size 7,906
Date (UTC) 29-Sep-2012
Time (UTC) 17:39
Platform Not Applicable
File name Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17963_none_37edaf9a746e7053.manifest
File version Not Applicable
File size 7,906
Date (UTC) 01-Oct-2012
Time (UTC) 17:02
Platform Not Applicable
File name Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22123_none_38a264378d6bd39b.manifest
File version Not Applicable
File size 7,906
Date (UTC) 29-Sep-2012
Time (UTC) 16:51
Platform Not Applicable

Additional files for all supported IA-64-based versions of Windows Server 2008 R2

File name Ia64_1074944af042233d291c06ae87d5da96_31bf3856ad364e35_6.1.7600.21333_none_f1d0abb33360f082.manifest
File version Not Applicable
File size 1,058
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name Ia64_3cec6372575677350d80d0484a517a42_31bf3856ad364e35_6.1.7601.22123_none_9c65dd544ce59db8.manifest
File version Not Applicable
File size 1,058
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name Ia64_4e46467001f9bbc9a1b1021f2412719c_31bf3856ad364e35_6.1.7600.17133_none_7929f499de85fe73.manifest
File version Not Applicable
File size 1,058
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name Ia64_d4cd0910ca58c25cae574dee7d1a40db_31bf3856ad364e35_6.1.7601.17963_none_e7fc40f34257475e.manifest
File version Not Applicable
File size 1,058
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17133_none_cfb5f6b48a6fbc7a.manifest
File version Not Applicable
File size 10,232
Date (UTC) 01-Oct-2012
Time (UTC) 18:21
Platform Not Applicable
File name Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21333_none_d03f9565a38d596b.manifest
File version Not Applicable
File size 10,232
Date (UTC) 29-Sep-2012
Time (UTC) 18:14
Platform Not Applicable
File name Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17963_none_d17c0dba87ae461e.manifest
File version Not Applicable
File size 10,232
Date (UTC) 01-Oct-2012
Time (UTC) 18:04
Platform Not Applicable
File name Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22123_none_d230c257a0aba966.manifest
File version Not Applicable
File size 10,232
Date (UTC) 29-Sep-2012
Time (UTC) 18:01
Platform Not Applicable
File name Update.mum
File version Not Applicable
File size 2,767
Date (UTC) 03-Oct-2012
Time (UTC) 02:41
Platform Not Applicable
File name Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17133_none_36279894772fe6af.manifest
File version Not Applicable
File size 7,906
Date (UTC) 01-Oct-2012
Time (UTC) 17:12
Platform Not Applicable
File name Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21333_none_36b13745904d83a0.manifest
File version Not Applicable
File size 7,906
Date (UTC) 29-Sep-2012
Time (UTC) 17:39
Platform Not Applicable
File name Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17963_none_37edaf9a746e7053.manifest
File version Not Applicable
File size 7,906
Date (UTC) 01-Oct-2012
Time (UTC) 17:02
Platform Not Applicable
File name Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22123_none_38a264378d6bd39b.manifest
File version Not Applicable
File size 7,906
Date (UTC) 29-Sep-2012
Time (UTC) 16:51
Platform Not Applicable

Additional file information for Windows 8 and for Windows Server 2012

Additional files for all supported x86-based versions of Windows 8

File name Update.mum
File version Not Applicable
File size 9,754
Date (UTC) 10-Oct-2012
Time (UTC) 21:18
Platform Not Applicable
File name X86_4978043d61b62004a9b13cbedcc2fcf8_31bf3856ad364e35_6.2.9200.20533_none_9efdefd0e29e04e8.manifest
File version Not Applicable
File size 713
Date (UTC) 10-Oct-2012
Time (UTC) 21:18
Platform Not Applicable
File name X86_e4fe4ecc114aff2eb4e4f8ba36be28bc_31bf3856ad364e35_6.2.9200.16432_none_49d4369afa4d17b2.manifest
File version Not Applicable
File size 713
Date (UTC) 10-Oct-2012
Time (UTC) 21:18
Platform Not Applicable
File name X86_microsoft-windows-i..rewebenginebinaries_31bf3856ad364e35_6.2.9200.16432_none_91e34806f72d77d7.manifest
File version Not Applicable
File size 7,009
Date (UTC) 10-Oct-2012
Time (UTC) 07:08
Platform Not Applicable
File name X86_microsoft-windows-i..rewebenginebinaries_31bf3856ad364e35_6.2.9200.20533_none_926de51c104a30f8.manifest
File version Not Applicable
File size 7,009
Date (UTC) 10-Oct-2012
Time (UTC) 07:02
Platform Not Applicable

Additional files for all supported x64-based versions of Windows 8 and Windows Server 2012

File name Amd64_0d7b7b13c4ccaa9328dc3d656803b709_31bf3856ad364e35_6.2.9200.20533_none_e44fda31bb7ae092.manifest
File version Not Applicable
File size 717
Date (UTC) 10-Oct-2012
Time (UTC) 21:18
Platform Not Applicable
File name Amd64_5245a835d2d7883ac02b3b738786c95c_31bf3856ad364e35_6.2.9200.20533_none_6194969d0222004c.manifest
File version Not Applicable
File size 1,076
Date (UTC) 10-Oct-2012
Time (UTC) 21:18
Platform Not Applicable
File name Amd64_594e1a8371390587ef4028be853c0905_31bf3856ad364e35_6.2.9200.20533_none_27cde5e99d34a22e.manifest
File version Not Applicable
File size 717
Date (UTC) 10-Oct-2012
Time (UTC) 21:18
Platform Not Applicable
File name Amd64_5bd42036805b1558492bc7f078c9b6f3_31bf3856ad364e35_6.2.9200.16432_none_732a9afa7814feaf.manifest
File version Not Applicable
File size 717
Date (UTC) 10-Oct-2012
Time (UTC) 21:18
Platform Not Applicable
File name Amd64_72b6ee3537aeeac0253aebea11ef31e1_31bf3856ad364e35_6.2.9200.16432_none_27aa684ff9899a9b.manifest
File version Not Applicable
File size 1,076
Date (UTC) 10-Oct-2012
Time (UTC) 21:18
Platform Not Applicable
File name Amd64_97eb1eee693dfa251c0bdbf55a6238a1_31bf3856ad364e35_6.2.9200.16432_none_8433fa2e93feb217.manifest
File version Not Applicable
File size 717
Date (UTC) 10-Oct-2012
Time (UTC) 21:18
Platform Not Applicable
File name Amd64_microsoft-windows-i..rewebenginebinaries_31bf3856ad364e35_6.2.9200.16432_none_ee01e38aaf8ae90d.manifest
File version Not Applicable
File size 7,015
Date (UTC) 10-Oct-2012
Time (UTC) 09:04
Platform Not Applicable
File name Amd64_microsoft-windows-i..rewebenginebinaries_31bf3856ad364e35_6.2.9200.20533_none_ee8c809fc8a7a22e.manifest
File version Not Applicable
File size 7,015
Date (UTC) 10-Oct-2012
Time (UTC) 09:29
Platform Not Applicable
File name Update.mum
File version Not Applicable
File size 10,048
Date (UTC) 10-Oct-2012
Time (UTC) 21:18
Platform Not Applicable
File name Wow64_microsoft-windows-i..rewebenginebinaries_31bf3856ad364e35_6.2.9200.16432_none_f8568ddce3ebab08.manifest
File version Not Applicable
File size 6,086
Date (UTC) 10-Oct-2012
Time (UTC) 07:02
Platform Not Applicable
File name Wow64_microsoft-windows-i..rewebenginebinaries_31bf3856ad364e35_6.2.9200.20533_none_f8e12af1fd086429.manifest
File version Not Applicable
File size 6,086
Date (UTC) 10-Oct-2012
Time (UTC) 08:07
Platform Not Applicable

                  

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.