Few frequently asked question for ASP.NET developers:
- The Identity Selector dialog box is displayed only for SSL protected pages. Therefore you are required to deploy your application on a Web server and install a SSL Certificate.
- Windows CardSpace does not work with Self Signed Certificates and will die horribly. These certificates do not have CRL field. It contains a URL that CardSpace will check for the revocation list.
- For ASP.NET developers there is Toolbox control written by Christian Arnold. Add this to your Toolbox and you won’t need to write a single line of code. Watch demo.
- When you use CardSpaceLogin controls you must run application over SSL. The application pool also need to be run under Local Systems identify; otherwise w3wp.exe process will not be able to retrieve server’s private key. In such case you may end up with error stating Keyset does not exist. Note: This is not advisory if the application pool is shared with other Web applications. [ Edited: Refer Barry Dorrans comment for more details.]
- When using Information cards there is nothing like passwords.
- CardSpaceLogin controls are integrated with your identify providers such as Forms Authentication. For example: If you use Information Card to register a user, his details are reflected in the identify source.
3 Comments
On point 4; no. Never ever do this. ASP.NET is not run as LocalSystem for very good reasons, it’s as high in the security context as you can get, and should IIS be compromised your entire machine is then wide open.
Instead run your process as normal (Network Service or a custom account) and grant read access to the SSL certificate instead.
I’ve put together the steps you need to take on my blog this afternoon; http://idunno.org/archive/2007/07/01/giving-your-web-site-process-access-to-your-ssl-certificate.aspx
i am making a website for our school . sir please tell me how to provide the facility to download application form. mean how to create download option in asp.net 2.0 with c #
Thanx for the information and the links. I was facing a problem at SSL certification with hotmail server for address-book retrieval. This post gave me some helpful idea.
Post a Comment