Certificate Restrictions

The Client Certificate Restrictions tab enables you to add additional requirements to the client certificates that will be accepted by Microsoft Internet and Security Acceleration (ISA) Server 2006. The client certificates must be from an authority listed on the Client Certificate Trust list, and must also meet the requirements on the Client Certificate Restrictions tab.

Client certificate restrictions can be based on:

• Issuer
• Subject
• Enhanced Key Usage
• Extensions

For each of these fields, you must provide an object ID to specify the acceptable value.

For example, you may want to restrict the client certificates to those whose Enhanced Key Usage field contains the following Smart Card Logon object ID: 1.3.6.1.4.1.311.20.2.2.

---

Get latest ISA Server content at ISA Server Guidance. Send feedback about this page.

• English-to-Russian translation