SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Our configuration:

  • SharePoint 2010 Enterprise SP1 (WFE box + SQL box )
  • HTTPS enabled web application (with client certificates required)
  • self signed client certificates
  • there is an account that is granted FullRead permission on the web application
  • a client certificate is issued for this account
  • the certificate is placed in (local computer)/personal certificate storage (on WFE)
  • the root certificate is in the (local computer)/Trusted certification authorites storage (on WFE)
  • a crawling rule is created which has this client certificate specified

Allways get Error from SharePoint site: HttpStatusCode Unauthorized The request failed with HTTP status 401: Unauthorized in corresponding content source log.

If I remove client certificates requirement on IIS, crawling works fine under the same account

How to configure SharePoint 2010 Search to work with client certificates?

share|improve this question
FYI SharePoint does not support client certificates (directly) - – Trevor Seward Mar 22 '13 at 15:30
Thank you, Trevor Seward. For me it's important to know that – Alexey Grachev Mar 22 '13 at 15:54
up vote 0 down vote accepted

Try extending the web application as an http only site (preferably on a different port) and have search index that instead. As long as both the http and https urls appear in Alternate Access Mappings, Search will know that the http and https sites point to the same data and will properly format the URLs it finds. The http-only URL should ideally only be visible within the SharePoint Farm itself and this can be done via DNS, Firewall or even HOSTS modifications.

share|improve this answer
Thank you, Dave for directing me the right way. One extra step I would add. Create server name mapping for the search service application and point the new (http) url as Address in index and original (https) url as Address in search results – Alexey Grachev Mar 25 '13 at 11:28

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.