Edit

An HTTP 403.4 was Returned Because SSL was Required on the Virtual Directory

  • Article

Topic Last Modified: 2011-01-21

The Microsoft Remote Connectivity Analyzer attempts to connect and authenticate to the Web site or virtual directory using the credentials and protocol supplied by the user. If the connection is attempted using a non-secure protocol, then the test can fail and return the following error:

"An HTTP 403.4 was returned because SSL was required on the virtual directory."

This issue occurs whenever a connection is attempted using a non-secure protocol (HTTP), but the server only allows Secure Sockets Layer (SSL) HTTPS connections. The most common scenario is attempting to connect to the website or virtual directory using HTTP instead of HTTPS.

For More Information

To correct this error, perform one of the following steps:

  • Use the HTTPS protocol to visit the Web site. That is, make sure that the URL begins with "https://"

  • In the SSL settings for the Web site, clear the Require SSL check box. To do this, perform the following steps:

For Windows 2003:

  1. Select Start, select Run, type Inetmgr, and then select OK.

  2. In Internet Information Services (IIS) Manager, expand Computer_Name , expand Web Sites, and then right-click the Web site that you want to remove the SSL feature from.

  3. Select Properties.

  4. Select the Security tab.

  5. Under Secure Communications, select the Edit button.

  6. Clear the following checkboxes:

    • Require Secure Channel when accessing this resource

    • Require 128-bit Encryption

  7. Select OK.

For Windows 2008:

  1. Select Start, select Run, type Inetmgr, and then select OK.

  2. In Internet Information Services (IIS) Manager, expand Computer_Name , expand Sites, and then select the Web site that you want to remove the SSL feature from.

  3. In the Middle Window pane, select SSL Settings.

  4. Clear the following checkboxes:

    • Require Secure Channel when accessing this resource

    • Require 128-bit Encryption

  5. Select Apply in the right pane.

The Microsoft Remote Connectivity Analyzer has limited documentation currently. To improve the documentation for each of the errors you might receive, we would like to solicit additional information from the community. Use the Community Content section to post more reasons why you failed at this point.  If you need technical assistance, create a post in the appropriate Exchange TechNet forum or contact support.