Previous Topic: Verify Your Certificate Approval and Install Your Client Authentication CertificateNext Topic: Grant Application Pool Identities for SharePoint Web Applications Permissions to the Client Certificate


Install the Client Authentication Certificate on your SharePoint Servers

The next step in establishing the mutual trust relationship is installing the client-authentication certificate on more servers.

Install the client authentication certificate that you exported from your IIS web server on the following servers in your SharePoint environment:

Follow these steps:

  1. Copy the exported client authentication certificate to a directory on your server.
  2. Click Start, Run.

    The Run dialog appears.

  3. In the Open field, type mmc and then click OK.
  4. Expand Certificates — Local Computer.
  5. Expand Personal.
  6. The certificates folder appears.

    Right-click the certificates folder, and then click All Tasks, Import.

  7. Import the client certificate.

    The certificate appears.

  8. Double-click the client certificate. Verify that the General tab is selected.
  9. Note the value in the Issued to field. You need this name to register the endpoint for the claims search service.
  10. Repeat Steps 1 through 9 on each server in your environment (your SharePoint central administration server and on each WFE server). For example, if you have one SharePoint central administration server and five WFE servers, perform this procedure six times.

    The client authentication certificate is installed. Continue with the next step of granting permissions to the application pools.