You are on page 1of 1

1. HTTP Error 403.16 when you try to access a website that's hosted on IIS 7.

0
a. Cause 1: Root certificate isn't in Trusted Root Certification Authorities
Certificate store
b. Cause 2: Non-self-signed certificates are in Trusted Root Certification
Authorities Certificate store https://getfishtank.ca/en/blog/sitecore-
9-xconnect-status-403-forbidden-certificate-error
2. Ensure you imported the certificates into the Local Computer’s certificate
store, not the current user’s certificate store.
3. Ensure the certificate you created in IIS has a name that matches the site.
For example, sc90_xconnect.
4. Ensure you pasted your thumbprint into a PowerShell command line
window, and that you removed the hidden character at the start of the
string.
5. Ensure the self-signed certificate you created in IIS has the same name as
your xConnect instance.
6. Ensure the client authentication certificate (under the local machine’s
Personal store) has read permissions for the IIS_IUSR group and the
NETWORK SERVICE group.

http://geekswithblogs.net/JeremyMorgan/archive/2016/08/18/how-to-find-
certificates-by-their-thumbprint.aspx

You might also like