FIX: "HTTP 403 (Forbidden)" when a client HTTPS request is sent to a Web application or a Web service in IIS 7.5 or IIS 8.0 and uses a self-signed certificate

View products that this article applies to.

Symptoms

Consider the following scenario:

You install a custom certificate validation module in Internet Information Services (IIS) 7.5 or IIS 8.0.
You host a Web application or Web service that accepts a self-signed certificate for validation in IIS.
An HTTPS request that uses a self-signed certificate from a client computer is sent to the Web application or Web service.

In this scenario, the client computer may receive an "HTTP 403 (Forbidden)" error message.

Cause

This issue occurs because IIS rejects the self-signed certificate before it reaches the custom certificate validation module.

Note This issue typically occurs when you use a large-sized certificate.

↑ Back to the top

Resolution

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix Download Available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website:

http://support.microsoft.com/contactus/?ws=support

Note The "Hotfix Download Available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

For IIS 7.5

To apply this hotfix, you must have IIS 7.5 installed on a computer that is running one of the following operating systems:

Windows 7
Windows 7 Service Pack 1 (SP1)
Windows Server 2008 R2
Windows Server 2008 R2 Service Pack 1 (SP1)

For IIS 8.0

To apply this hotfix, you must have IIS 8.0 installed on a computer that is running one of the following operating systems:

Windows 8
Windows Server 2012

Restart requirement

You must restart the computer if IIS is running when you apply this hotfix.

Hotfix replacement information

This hotfix does not replace a previously released hotfix.

File information

The global version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported x86-based versions of Windows 7

File name	File version	File size	Date	Time	Platform
Hwebcore.dll	7.5.7600.17133	12,800	1-Oct-12	15:48	x86
Iiscore.dll	7.5.7600.17133	197,632	1-Oct-12	16:49	x86
W3dt.dll	7.5.7600.17133	24,064	1-Oct-12	15:49	x86
Hwebcore.dll	7.5.7600.21333	12,800	29-Sep-12	15:44	x86
Iiscore.dll	7.5.7600.21333	200,192	29-Sep-12	16:44	x86
W3dt.dll	7.5.7600.21333	24,064	29-Sep-12	15:44	x86
Hwebcore.dll	7.5.7601.17963	12,800	1-Oct-12	15:41	x86
Iiscore.dll	7.5.7601.17963	198,144	1-Oct-12	16:40	x86
W3dt.dll	7.5.7601.17963	24,064	1-Oct-12	15:41	x86
Hwebcore.dll	7.5.7601.22123	12,800	29-Sep-12	15:29	x86
Iiscore.dll	7.5.7601.22123	200,192	29-Sep-12	16:28	x86
W3dt.dll	7.5.7601.22123	24,064	29-Sep-12	15:29	x86

For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

File name	File version	File size	Date	Time	Platform
Hwebcore.dll	7.5.7600.17133	15,360	1-Oct-12	17:46	x64
Iiscore.dll	7.5.7600.17133	313,856	1-Oct-12	17:46	x64
W3dt.dll	7.5.7600.17133	31,744	1-Oct-12	17:52	x64
Hwebcore.dll	7.5.7600.21333	15,360	29-Sep-12	17:25	x64
Iiscore.dll	7.5.7600.21333	314,880	29-Sep-12	17:26	x64
W3dt.dll	7.5.7600.21333	31,744	29-Sep-12	17:31	x64
Hwebcore.dll	7.5.7601.17963	15,360	1-Oct-12	17:37	x64
Iiscore.dll	7.5.7601.17963	300,544	1-Oct-12	17:37	x64
W3dt.dll	7.5.7601.17963	32,256	1-Oct-12	17:41	x64
Hwebcore.dll	7.5.7601.22123	15,360	29-Sep-12	17:40	x64
Iiscore.dll	7.5.7601.22123	315,392	29-Sep-12	17:40	x64
W3dt.dll	7.5.7601.22123	32,256	29-Sep-12	17:45	x64

For all supported IA-64-based versions of Windows Server 2008 R2

File name	File version	File size	Date	Time	Platform
Hwebcore.dll	7.5.7600.17133	37,376	1-Oct-12	16:34	IA-64
Iiscore.dll	7.5.7600.17133	573,952	1-Oct-12	16:34	IA-64
W3dt.dll	7.5.7600.17133	52,736	1-Oct-12	16:42	IA-64
Hwebcore.dll	7.5.7600.21333	37,376	29-Sep-12	16:27	IA-64
Iiscore.dll	7.5.7600.21333	581,632	29-Sep-12	16:27	IA-64
W3dt.dll	7.5.7600.21333	52,736	29-Sep-12	16:33	IA-64
Hwebcore.dll	7.5.7601.17963	37,376	1-Oct-12	16:26	IA-64
Iiscore.dll	7.5.7601.17963	575,488	1-Oct-12	16:27	IA-64
W3dt.dll	7.5.7601.17963	52,736	1-Oct-12	16:32	IA-64
Hwebcore.dll	7.5.7601.22123	37,376	29-Sep-12	16:34	IA-64
Iiscore.dll	7.5.7601.22123	582,144	29-Sep-12	16:34	IA-64
W3dt.dll	7.5.7601.22123	52,736	29-Sep-12	16:40	IA-64

For all supported x86-based versions of Windows 8

File name	File version	File size	Date	Time	Platform
Hwebcore.dll	8.0.9200.16432	14,336	10-Oct-12	6:30	x86
Iiscore.dll	8.0.9200.16432	206,336	10-Oct-12	6:30	x86
W3dt.dll	8.0.9200.16432	25,600	10-Oct-12	6:31	x86
Hwebcore.dll	8.0.9200.20533	14,336	10-Oct-12	6:43	x86
Iiscore.dll	8.0.9200.20533	206,336	10-Oct-12	6:43	x86
W3dt.dll	8.0.9200.20533	25,600	10-Oct-12	6:44	x86

For all supported x64-based versions of Windows 8 and Windows Server 2012

File name	File version	File size	Date	Time	Platform
Hwebcore.dll	8.0.9200.16432	16,896	10-Oct-12	7:04	x64
Iiscore.dll	8.0.9200.16432	318,976	10-Oct-12	7:04	x64
W3dt.dll	8.0.9200.16432	39,424	10-Oct-12	7:04	x64
Hwebcore.dll	8.0.9200.20533	16,896	10-Oct-12	7:16	x64
Iiscore.dll	8.0.9200.20533	318,976	10-Oct-12	7:16	x64
W3dt.dll	8.0.9200.20533	39,424	10-Oct-12	7:17	x64

Additional file information

Additional file information for Windows 7 and for Windows Server 2008 R2

Additional files for all supported x86-based versions of Windows 7

File name	Update.mum
File version	Not Applicable
File size	3,288
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	X86_16c40cfb0553320201a9516c6b418272_31bf3856ad364e35_6.1.7600.21333_none_3b02ff940e9924f8.manifest
File version	Not Applicable
File size	705
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	X86_8da928bef21d8d7808ef7aeee6926905_31bf3856ad364e35_6.1.7600.17133_none_b71a709d2b21533e.manifest
File version	Not Applicable
File size	705
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	X86_a87e19d1cafed07c5acee30208af93ed_31bf3856ad364e35_6.1.7601.17963_none_d04b1d36617df4a1.manifest
File version	Not Applicable
File size	705
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	X86_fc9390e976c9cb57127ea968d51bf044_31bf3856ad364e35_6.1.7601.22123_none_4b2ad2f1b7b1c5b3.manifest
File version	Not Applicable
File size	705
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17133_none_cfb452be8a71b37e.manifest
File version	Not Applicable
File size	10,228
Date (UTC)	01-Oct-2012
Time (UTC)	17:17
Platform	Not Applicable

File name	X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21333_none_d03df16fa38f506f.manifest
File version	Not Applicable
File size	10,228
Date (UTC)	29-Sep-2012
Time (UTC)	17:59
Platform	Not Applicable

File name	X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17963_none_d17a69c487b03d22.manifest
File version	Not Applicable
File size	10,228
Date (UTC)	01-Oct-2012
Time (UTC)	17:12
Platform	Not Applicable

File name	X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22123_none_d22f1e61a0ada06a.manifest
File version	Not Applicable
File size	10,228
Date (UTC)	29-Sep-2012
Time (UTC)	17:00
Platform	Not Applicable

Additional files for all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

File name	Amd64_23731bd974f6f71be47385b3ce6428c4_31bf3856ad364e35_6.1.7601.22123_none_2f15b44cbd2130f6.manifest
File version	Not Applicable
File size	1,060
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	Amd64_2d402ef2a908f8d2dd9149fef64e9d7f_31bf3856ad364e35_6.1.7600.17133_none_ea36ea0312480248.manifest
File version	Not Applicable
File size	1,060
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	Amd64_982a1283a7dd3d9cb66618d57bacb301_31bf3856ad364e35_6.1.7600.21333_none_611fb332d1497b7f.manifest
File version	Not Applicable
File size	1,060
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	Amd64_affff66f55ebbdac34ba581047a3e6c5_31bf3856ad364e35_6.1.7601.17963_none_be03a951bbb6a048.manifest
File version	Not Applicable
File size	1,060
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17133_none_2bd2ee4242cf24b4.manifest
File version	Not Applicable
File size	10,236
Date (UTC)	01-Oct-2012
Time (UTC)	18:21
Platform	Not Applicable

File name	Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21333_none_2c5c8cf35becc1a5.manifest
File version	Not Applicable
File size	10,236
Date (UTC)	29-Sep-2012
Time (UTC)	18:19
Platform	Not Applicable

File name	Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17963_none_2d990548400dae58.manifest
File version	Not Applicable
File size	10,236
Date (UTC)	01-Oct-2012
Time (UTC)	18:12
Platform	Not Applicable

File name	Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22123_none_2e4db9e5590b11a0.manifest
File version	Not Applicable
File size	10,236
Date (UTC)	29-Sep-2012
Time (UTC)	19:31
Platform	Not Applicable

File name	Update.mum
File version	Not Applicable
File size	3,730
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17133_none_36279894772fe6af.manifest
File version	Not Applicable
File size	7,906
Date (UTC)	01-Oct-2012
Time (UTC)	17:12
Platform	Not Applicable

File name	Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21333_none_36b13745904d83a0.manifest
File version	Not Applicable
File size	7,906
Date (UTC)	29-Sep-2012
Time (UTC)	17:39
Platform	Not Applicable

File name	Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17963_none_37edaf9a746e7053.manifest
File version	Not Applicable
File size	7,906
Date (UTC)	01-Oct-2012
Time (UTC)	17:02
Platform	Not Applicable

File name	Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22123_none_38a264378d6bd39b.manifest
File version	Not Applicable
File size	7,906
Date (UTC)	29-Sep-2012
Time (UTC)	16:51
Platform	Not Applicable

Additional files for all supported IA-64-based versions of Windows Server 2008 R2

File name	Ia64_1074944af042233d291c06ae87d5da96_31bf3856ad364e35_6.1.7600.21333_none_f1d0abb33360f082.manifest
File version	Not Applicable
File size	1,058
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	Ia64_3cec6372575677350d80d0484a517a42_31bf3856ad364e35_6.1.7601.22123_none_9c65dd544ce59db8.manifest
File version	Not Applicable
File size	1,058
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	Ia64_4e46467001f9bbc9a1b1021f2412719c_31bf3856ad364e35_6.1.7600.17133_none_7929f499de85fe73.manifest
File version	Not Applicable
File size	1,058
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	Ia64_d4cd0910ca58c25cae574dee7d1a40db_31bf3856ad364e35_6.1.7601.17963_none_e7fc40f34257475e.manifest
File version	Not Applicable
File size	1,058
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17133_none_cfb5f6b48a6fbc7a.manifest
File version	Not Applicable
File size	10,232
Date (UTC)	01-Oct-2012
Time (UTC)	18:21
Platform	Not Applicable

File name	Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21333_none_d03f9565a38d596b.manifest
File version	Not Applicable
File size	10,232
Date (UTC)	29-Sep-2012
Time (UTC)	18:14
Platform	Not Applicable

File name	Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17963_none_d17c0dba87ae461e.manifest
File version	Not Applicable
File size	10,232
Date (UTC)	01-Oct-2012
Time (UTC)	18:04
Platform	Not Applicable

File name	Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22123_none_d230c257a0aba966.manifest
File version	Not Applicable
File size	10,232
Date (UTC)	29-Sep-2012
Time (UTC)	18:01
Platform	Not Applicable

File name	Update.mum
File version	Not Applicable
File size	2,767
Date (UTC)	03-Oct-2012
Time (UTC)	02:41
Platform	Not Applicable

File name	Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17133_none_36279894772fe6af.manifest
File version	Not Applicable
File size	7,906
Date (UTC)	01-Oct-2012
Time (UTC)	17:12
Platform	Not Applicable

File name	Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21333_none_36b13745904d83a0.manifest
File version	Not Applicable
File size	7,906
Date (UTC)	29-Sep-2012
Time (UTC)	17:39
Platform	Not Applicable

File name	Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17963_none_37edaf9a746e7053.manifest
File version	Not Applicable
File size	7,906
Date (UTC)	01-Oct-2012
Time (UTC)	17:02
Platform	Not Applicable

File name	Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22123_none_38a264378d6bd39b.manifest
File version	Not Applicable
File size	7,906
Date (UTC)	29-Sep-2012
Time (UTC)	16:51
Platform	Not Applicable

Additional file information for Windows 8 and for Windows Server 2012

Additional files for all supported x86-based versions of Windows 8

File name	Update.mum
File version	Not Applicable
File size	9,754
Date (UTC)	10-Oct-2012
Time (UTC)	21:18
Platform	Not Applicable

File name	X86_4978043d61b62004a9b13cbedcc2fcf8_31bf3856ad364e35_6.2.9200.20533_none_9efdefd0e29e04e8.manifest
File version	Not Applicable
File size	713
Date (UTC)	10-Oct-2012
Time (UTC)	21:18
Platform	Not Applicable

File name	X86_e4fe4ecc114aff2eb4e4f8ba36be28bc_31bf3856ad364e35_6.2.9200.16432_none_49d4369afa4d17b2.manifest
File version	Not Applicable
File size	713
Date (UTC)	10-Oct-2012
Time (UTC)	21:18
Platform	Not Applicable

File name	X86_microsoft-windows-i..rewebenginebinaries_31bf3856ad364e35_6.2.9200.16432_none_91e34806f72d77d7.manifest
File version	Not Applicable
File size	7,009
Date (UTC)	10-Oct-2012
Time (UTC)	07:08
Platform	Not Applicable

File name	X86_microsoft-windows-i..rewebenginebinaries_31bf3856ad364e35_6.2.9200.20533_none_926de51c104a30f8.manifest
File version	Not Applicable
File size	7,009
Date (UTC)	10-Oct-2012
Time (UTC)	07:02
Platform	Not Applicable

Additional files for all supported x64-based versions of Windows 8 and Windows Server 2012

File name	Amd64_0d7b7b13c4ccaa9328dc3d656803b709_31bf3856ad364e35_6.2.9200.20533_none_e44fda31bb7ae092.manifest
File version	Not Applicable
File size	717
Date (UTC)	10-Oct-2012
Time (UTC)	21:18
Platform	Not Applicable

File name	Amd64_5245a835d2d7883ac02b3b738786c95c_31bf3856ad364e35_6.2.9200.20533_none_6194969d0222004c.manifest
File version	Not Applicable
File size	1,076
Date (UTC)	10-Oct-2012
Time (UTC)	21:18
Platform	Not Applicable

File name	Amd64_594e1a8371390587ef4028be853c0905_31bf3856ad364e35_6.2.9200.20533_none_27cde5e99d34a22e.manifest
File version	Not Applicable
File size	717
Date (UTC)	10-Oct-2012
Time (UTC)	21:18
Platform	Not Applicable

File name	Amd64_5bd42036805b1558492bc7f078c9b6f3_31bf3856ad364e35_6.2.9200.16432_none_732a9afa7814feaf.manifest
File version	Not Applicable
File size	717
Date (UTC)	10-Oct-2012
Time (UTC)	21:18
Platform	Not Applicable

File name	Amd64_72b6ee3537aeeac0253aebea11ef31e1_31bf3856ad364e35_6.2.9200.16432_none_27aa684ff9899a9b.manifest
File version	Not Applicable
File size	1,076
Date (UTC)	10-Oct-2012
Time (UTC)	21:18
Platform	Not Applicable

File name	Amd64_97eb1eee693dfa251c0bdbf55a6238a1_31bf3856ad364e35_6.2.9200.16432_none_8433fa2e93feb217.manifest
File version	Not Applicable
File size	717
Date (UTC)	10-Oct-2012
Time (UTC)	21:18
Platform	Not Applicable

File name	Amd64_microsoft-windows-i..rewebenginebinaries_31bf3856ad364e35_6.2.9200.16432_none_ee01e38aaf8ae90d.manifest
File version	Not Applicable
File size	7,015
Date (UTC)	10-Oct-2012
Time (UTC)	09:04
Platform	Not Applicable

File name	Amd64_microsoft-windows-i..rewebenginebinaries_31bf3856ad364e35_6.2.9200.20533_none_ee8c809fc8a7a22e.manifest
File version	Not Applicable
File size	7,015
Date (UTC)	10-Oct-2012
Time (UTC)	09:29
Platform	Not Applicable

File name	Update.mum
File version	Not Applicable
File size	10,048
Date (UTC)	10-Oct-2012
Time (UTC)	21:18
Platform	Not Applicable

File name	Wow64_microsoft-windows-i..rewebenginebinaries_31bf3856ad364e35_6.2.9200.16432_none_f8568ddce3ebab08.manifest
File version	Not Applicable
File size	6,086
Date (UTC)	10-Oct-2012
Time (UTC)	07:02
Platform	Not Applicable

File name	Wow64_microsoft-windows-i..rewebenginebinaries_31bf3856ad364e35_6.2.9200.20533_none_f8e12af1fd086429.manifest
File version	Not Applicable
File size	6,086
Date (UTC)	10-Oct-2012
Time (UTC)	08:07
Platform	Not Applicable

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top

Applies to:

Internet Information Services 8.0

↑ Back to the top

Keywords: kbautohotfix, kbqfe, kbhotfixserver, kbfix, kbhotfixdev, kbsurveynew, kbexpertiseadvanced, kb

↑ Back to the top

Article Info

Article ID	:	2763973
Revision	:	1
Created on	:	1/7/2017
Published on	:	11/1/2012
Exists online	:	False
Views	:	260

Microsoft KB Archive Search

FIX: "HTTP 403 (Forbidden)" when a client HTTPS request is sent to a Web application or a Web service in IIS 7.5 or IIS 8.0 and uses a self-signed certificate

Symptoms

Cause

Resolution

Hotfix information

Prerequisites

Restart requirement

Hotfix replacement information

File information

For all supported x86-based versions of Windows 7

For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

For all supported IA-64-based versions of Windows Server 2008 R2

Additional file information

Additional file information for Windows 7 and for Windows Server 2008 R2

Additional files for all supported x86-based versions of Windows 7

Additional files for all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

Additional files for all supported IA-64-based versions of Windows Server 2008 R2

Status

Applies to: