Designing Secure Web-Based Applications for Microsoft Windows 2000 with CDROM

Available in IIS 4?

No.

What privileges are required?

The Logon Across The Network privilege is required for all accounts.

Supports delegation?

No.

Delegation capabilities diagram

Requires Active Directory?

Yes. The certificates are held in Active Directory.

Browser support

Any browser that supports client authentication certificates; this includes all current versions of Netscape and Microsoft browsers.

Works through proxies and firewalls?

Yes.

Other notes

The mapping is automatically performed by Active Directory; there is no need to perform any password administration. Requires SSL3 or TLS 1 and the server configured to accept or require client authentication certificates.