Q: We use client certificates to lock down access to a secure Web-based extranet application hosted by our Microsoft IIS server on the Internet. IIS is the only application most users use that requires client certificates, therefore they have only one client certificate. However, Microsoft Internet Explorer (IE) still prompts users to select a client certificate each time they access the site, even though there's only one certificate to choose from. Is there any way to save users from this seemingly unnecessary step?
A: Yes. Simply open IE, click Tools, Internet Options, and then select the Security tab. Select the zone associated with your application’s Web site and click Custom level. Find the Don’t prompt for client certificate selection when no certificates or only one certificate exists option and enable it. Now users will no longer be prompted because IE will automatically select their client certificate and use it to access the Web site.