Setup SSL for Web Site

Requirements
To configure Active Directory certificate mapping, you must have the following components:
Windows 2000 Active Directory.

An enterprise certification authority (CA) (it can be either a root or a subordinate).

A server certificate that is signed by the enterprise CA that is installed on your Web server.

A User certificate that is signed by the enterprise CA that is installed on that user's computer.

Enable the Active Directory Mapper in IIS 5.0
To enable the Active Directory mapper in IIS 5.0, follow these steps:
Start the Internet Information Services snap-in, right-click the server that is hosting your Web site, and then click Properties .

In the Master properties box, click WWW Service , and then click Edit .

Click the Directory Security tab, and then click to select the Enable the Windows directory service mapper check box

Click OK to accept the changes.

Click OK to close the server properties dialog box.

Enable Client Certificate Mapping on Your Web Site
To enable client certificate mapping on your Web site, follow these steps:
Start the Internet Information Services snap-in, right-click the Web site that you would like to configure to enable certificate mapping, and then click Properties .

On the Directory Security tab, click Secure communications , and then click Edit .

In the Client certificates section, click Require client certificates , and then verify that the Enable client certificate mapping check box has been selected.

Click OK to accept the changes.

Click OK to close the Web site properties dialog box.

Map the Client Certificate to the Corresponding Active Directory User
To map the client certificate to the corresponding Active Directory user, follow these steps:
Export the user's certificate using one of the following methods:

Method One
Start the Certificates, Current User snap-in, and then double-click the Personal folder.

Double-click the Certificates folder. A list is displayed that indicates the certificates that are stored in the user's store.

Click the certificate for Secure Sockets Layer (SSL) communication, and then click Export . A wizard is displayed that enables you to export the certificate.

Method Two
If you are running Internet Explorer 5.0 or later, follow these steps:

On the Tools menu, click Internet Options .

Click Content , click Certificates , and then click the Personal tab.

Click the certificate that is used for SSL communications, and then click the Export button. A wizard is displayed that enables you to export the certificate.

When you come to the end of the wizard, save the certificate to a public folder in Binary or Base64 format so that it can be mapped to the Active Directory user account.

NOTE : For SSL purposes, the certificate should at least support client authentication.

Start the Active Directory Users and Computers snap-in, right-click your domain, and then click Advanced Options on the View menu.

Open the Users container or the organizational unit where the user accountresides, right-click the user account, and then click Name Mapping .

Click Add to link the user's certificate to the Active Directory user account.

Click the public folder where the user certificate was saved, click the user's certificate, and then click Open .

Click to select the Use Subject for alternate security identity check box.

Click OK to accept the mapped certificate.

Click OK to close the Identity Mapping dialog box.

Your not going to believe this, but my only problem was that I forgot to open port 443 on my firewall!!!!
Sometimes it's the simplest thing that get ya!
I appreciate, and will save the info on the client mappings...I was curious about this part of it as well! Thanks for the help!!!!