SSLAlwaysNegoClientCert
The SSLAlwaysNegoClientCert property controls SSL client connection negotiations. If this property is set to true, any time SSL connections are negotiated, the server will immediately negotiate a client certificate, preventing an expensive renegotiation. Setting SSLAlwaysNegoClientCert also helps eliminate client certificate renegotiation deadlocks, which may occur when a client is blocked on sending a large request body when a renegotiation request is received.
Schema Attributes
Attribute Name |
Value |
|---|---|
BOOL |
|
DWORD_METADATA |
|
FALSE |
|
Not specified. |
|
1 |
|
Not specified |
|
5521 |
|
MD_SSL_ALWAYS_NEGO_CLIENT_CERT |
|
INHERIT |
|
IIS_MD_UT_SERVER |
Configurable Locations
You can configure this property at the following locations in the IIS metabase.
Metabase Path |
IIS Admin Object Type |
|---|---|
/LM/W3SVC |
IIsWebService |
/LM/W3SVC/n |
IIsWebServer |
Flags
There are no flags for this property.
Requirements
Server: Requires or Windows Server 2003.
Product: IIS
See Also
Concepts
Comparison of IIS Administration Features