You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: support/developer/webapps/iis/site-behavior-performance/http-403-forbidden-access-website.md
+16-16Lines changed: 16 additions & 16 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,20 +1,20 @@
1
1
---
2
2
title: HTTP Error 403.16 when you access a website
3
-
description: This article describes the problem where an HTTP 403.16 error occurs when you try to access a website that's hosted by IIS 7.0.
4
-
ms.date: 03/26/2020
3
+
description: This article describes the problem where an HTTP 403.16 error occurs when you try to access a website that's hosted on IIS.
4
+
ms.date: 01/09/2025
5
5
ms.custom: sap:Site Behavior and Performance\Runtime errors and exceptions, including HTTP 400 and 50x errors
6
-
ms.reviewer: mlaing
6
+
ms.reviewer: mlaing, paulboc
7
7
---
8
-
# HTTP Error 403.16 when you try to access a website that's hosted on IIS 7.0
8
+
# HTTP Error 403.16 when you try to access a website that's hosted on IIS
9
9
10
-
This article helps you resolve the **HTTP 403.16 - Forbidden** error that occurs when you access a website that's hosted on Internet Information Services (IIS) 7.0.
10
+
This article helps you resolve the "HTTP 403.16 - Forbidden" error that occurs when you access a website that's hosted on Internet Information Services (IIS).
11
11
12
-
_Original product version:_ Internet Information Services 7.0
12
+
_Original product version:_ Internet Information Services
13
13
_Original KB number:_ 942061
14
14
15
15
## Symptoms
16
16
17
-
You have a website that's hosted on IIS 7.0. When you try to access the site through a web browser, you receive an error message that resembles one of the following examples.
17
+
You have a website hosted on the IIS web server that ships with Windows Server 2016 or later. When you try to access the site through a web browser, you receive an error message that resembles one of the following examples:
18
18
19
19
- Error message 1
20
20
@@ -35,13 +35,9 @@ This problem occurs because the root certificate of the certification authority
35
35
> [!NOTE]
36
36
> The root certificate of the certification authority is used to issue the client certificate.
37
37
38
-
## Cause 2: Non-self-signed certificates are in Trusted Root Certification Authorities Certificate store
39
-
40
-
There are one or more non-self-signed certificates in the Trusted Root Certification Authorities Certificate store. A non-self-signed certificate is any certificate for which the `Issued To` and `Issued By` values aren't an exact match.
41
-
42
-
## Resolution for cause 1
38
+
### Resolution for cause 1
43
39
44
-
1. On the IIS Web server, select **Start**, type *mmc.exe* in the **Start Search** box, right-click mmc.exe, and then select **Run as administrator**.
40
+
1. On the IIS Web server, select **Start**, type *mmc.exe* in the **Start Search** box, right-click **mmc.exe**, and then select **Run as administrator**.
45
41
46
42
> [!NOTE]
47
43
> If you are prompted for an administrator password or for a confirmation, type the password, or select **Continue**.
@@ -51,12 +47,16 @@ There are one or more non-self-signed certificates in the Trusted Root Certifica
51
47
4. Select **Computer account**, and then select **Next**.
52
48
5. Select **Local computer**, select **Finish**, and then select **Close**.
53
49
6. To exit the wizard, select **OK**.
54
-
7. Expand **Certificates**, expand**Trusted Root Certification Authorities**, right-click **Certificates**, point to **All Tasks**, and then select **Import**.
50
+
7. Expand **Certificates** >**Trusted Root Certification Authorities**, right-click **Certificates**, point to **All Tasks**, and then select **Import**.
55
51
8. In the Certificate Import Wizard, select **Next**.
56
52
9. In the **File name** box, type the location of the root certificate of the certification authority, and then select **Next**.
57
-
10. Select **Next**, and then select **Finish**.
53
+
10. Select **Next** > **Finish**.
54
+
55
+
## Cause 2: Non-self-signed certificates are in Trusted Root Certification Authorities Certificate store
56
+
57
+
There are one or more non-self-signed certificates in the Trusted Root Certification Authorities Certificate store. A non-self-signed certificate is any certificate for which the `Issued To` and `Issued By` values aren't an exact match.
58
58
59
-
## Resolution for cause 2
59
+
###Resolution for cause 2
60
60
61
61
Move any non-self-signed certificated out of the Trusted Root Certification Authorities Certificate store and into the Intermediate Certification Authorities Certificate store.
0 commit comments