Client-Side Certificate Authentication only for parts of your Website
Client-Side Certificate Authentication ensures the highest level of security when connecting to extranet applications dedicated to your users, such as WebMail, CRM... But when it comes to public sites, it's no longer appropriate.
Client-Side Certificate Authentication ensures the highest level of security when connecting to Extranet applications dedicated to your users, such as WebMail, CRM...
But when it comes to public sites, it's no longer appropriate.
For example, you may have a Web application for the general public, such as Wordpress, a file-sharing application or a Web API service.
You only need to secure a few administration areas.
A) Set the Client-Side Certification to “optional”
- On the Client-Side Certification parameters, turn to on the “Optional” option
- The main status parameters displays the state to “For Parts of this Website”
B) Define which part to require the Client Certificate
- Select the “Paths” tab
- Click on the New path button
- Set the path you want to securize.
- Turn on the “Verifies The Client Certificate” option
- Click on Add button
- In the list, your path will have a green icon with a locked user, indicating that this path uses client certificate verification.
- Click on Build Configuration button in order to apply your path rules.
- Now access to your website is available to all users except for the path you specified
