Comments on: CAC Enabled Anonymous Sharepoint Sites

By: adam

adam — Tue, 26 Jan 2010 20:10:58 +0000

please leave comments on this article with your CAC / SharePoint experiences.

Thank you…Adam.

By: Bruce

Bruce — Mon, 07 Dec 2009 19:12:12 +0000

Great article, well structured and written! I worked with a SharePoint portal in the past and we were planning for the future; CAC enbabling the site was brought up. Reddy’s situation would have been one similar to mine. Were there any responses to Reddy’s questions? I am no longer on that SP portal and this is just for my personal knowledge on how it would’ve worked. Thanks again for a good read

By: Reddy

Reddy — Fri, 13 Nov 2009 16:21:35 +0000

Hi Noni,

I have been struggling for almost 2 weeks to make my SharePoint site work with CAC card. We don’t have ISA 2006 environment. I need to implement CAC authentication directly to WEB server. below is the scenario.

I have created MOSS2007 web site in Windows server 2008 with windows authentication(AD). I need to make this site with CAC authentication. AD has all client certificates mapped to user accounts.

STEP 1:
I installed Client Certificate mapping authentication in IIS7.0 and enabled for the server.
I enabled Client Certificate Mapping and set the ssl propety to SslNegotiateCert in IIS7.0.

I try to access the site from client browser with my CAC and it prompts to choose digital certificate(no certificates in it). When I click on ok then it prompts me windows authentication prompt.

STEP2:
I followed your step 3 above and site started giving 403 error.

I am desperately looking for the solution.

Can you please assist me on this solution?

Thanks,
Reddy

By: Windows 7 Now With XP Mode, Office 2010 Screenshots, EDS to Sell Microsoft Hosted Applications - SharePoint Daily - Bamboo Nation

Tue, 28 Apr 2009 12:19:18 +0000

[...] Around the BlogosphereCAC Enabled Anonymous SharePoint Sites (SharePoint Shelter)If you worked/have worked or plan on working within the DoD environment, security will be a subject that haunts your dreams. Not that security isn’t prevalent in the private sector, but given the nature of our work security is a top priority if not the number one priority. That being said, I have been working with the DoD’s PKI for the past few years so I am fully aware of the scope and implications of providing a secure computing environment. Recently I was tasked with bringing all of our publicly available servers to a secure standard. [...]