Clients browsing to a Web site receive HTTP 403.4 - Forbidden: SSL is required to view this resource error, but the Web site is not configured to use SSL

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1

It is possible that the Web site configuration has been altered to require SSL, although no certificate has been associated with the Web site. This might happen because the Edit button on the Directory Security tab is available although no certificate is associated with the Web site. The Edit button allows changes to be made to the site's SSL configuration even if a certificate has been removed.

To correct this problem, change the Web site configuration to not require SSL.

Procedures

To remove SSL from a Web site by using IIS Manager

  1. In IIS Manager, right-click the Web site whose SSL configuration you want to change, and then click Properties.

  2. On the Directory Security tab, in the Secure Communications area, click Edit.

  3. Clear the Require Secure Channel (SSL) check box, and then click OK.

To remove SSL from a Web site by using adsutil.vbs

  1. Click Start, click Run, type cmd, and then click OK.

  2. Change to the inetpub\adminscripts directory.

  3. At the command prompt, type the following command for the Web site whose SSL configuration you want to change, substituting # with the Web site identifier:

    cscript adsutil.vbs set w3svc/#/AccessSSL False