digital certificates

[bahamas]

We have a requirement where we need to enforce digital certificates on client machines. In abstract, the requirement is to have digital certificates installed in a limited set of machines in the client local network which certain users will need to use in order to gain login to the system. These users will hold different roles in the system. The idea is that we need to stop these users from login in to the system from any other machine except through the ones designated for them in the client network.



What I need from you is :



1) How digital certificates work and how we can use them to validate client machine authenticity upon user login to serve our requirement above.



2) The step-by-step configuration requirements we need to follow at the server and client ends in generating and setting up digital certificate rights. (I would prefer a short concise note by you with the steps involved)



3) A simple working example for securing a C#/ASP.NET (IIS-based) web application though digital certificates. (You can create a sample VS.NET web project with a login page for this purpose )

[kenobewan]

We call this a homework question. Please read the Posting Guidelines before your next post.

Here is an article that may help with 1 - Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication