Hi All,
I need some help with a security set up. We have two web servers each in a separte security zone. The second web server consumes web services from the first web server. We are trying to implement a trusted sub system model where by the original users identity is not used to grant permission to access the web services... rather a trusted system identity is used. This seems to be a model that MS supports, but I cannot figure out how to implement it. We wnat to ensure that only a specific web services on the first web server can be consumed by the second web server. In order to validate the identity of the second web server we wish to use a combination of an activer directory service account/password and a certificate.
So, can anyone advise me on how to:
Configure the first server to on allow the second web server to consume certain web services.
Confirgure the the first server ...
Go to the complete details ...