Guidelines For Designing Client Authentication Using Certificates

By Author: Jasmine
Total Articles: 286
Comment this article

Follow these guidelines for designing A plus benefits client authentication using certificates:
Use IIS mapping if there is a need for advanced wildcard mapping.Wildcard mapping is easier and more flexible using IIS mapping.
Use DS mapping when all users already have Active Directory accounts. Doing this will save time and allow access to multiple servers.
Use DS mapping when authentication at many servers is necessary.Otherwise, IIS mapping would have to be repeated at each server. DS mapping is not
entered at the server.
Use IIS mapping in a small network or where greater control over issuance and revocation is required. In a small network, a PKI might not be estab?
lished, as it would be cost prohibitive to provide certificates for all users. A single Web server might be all there is to manage. When DS mapping is used, all users with certificates have access. When IIS mapping is used, the user certificate must be explicitly mapped just having a certificate will not gain the user access.
Use one-to-one mapping for greater security. ...
... One-to-one mapping provides accountability. You can audit and prove who accesses the server. In many-to-one
mapping, all user access ?will be recorded as coming from a single account.
Use many-to-one mapping where similar access by a large number of A plus certification online users is required and where there is no requirement for accountability. Access
by every user will be recorded as access by the common account. Many-to-one
mapping can be quickly set up, but it does not provide accountability.
If you have multiple Web sites on the server, ensuring that users accessing one site cannot access another site.
Ensuring proper file and folder permissions are set that support permissions set on Web accessible folders. More information on this topic can be found in the "Guidelines for Controlling Access to Web Servers, Web Sites, Applications, and Server Resources" section.
World Wide Web Service—Provides basic Web services, such as static and dynamic Web pages. This feature must be enabled or all components will be disabled.
After installation, you might need to perform additional configuration that can free Microsoft practice IT questions further restrict the use or functioning of the services.