We have an application deployed to IIS and every time we connect to it, we get the following browser prompt:

Select a certificate to authenticate yourself to sitename

Select a Certificate prompt

We do not have a reason to challenge for a client certificate and seems like this setting was introduced by mistake

How can we remove it?

Research:

  1. Open IIS and navigate to your web site or application and go to the SSL settings

IIS Settings > SSL Settings

  1. Set the Client Certificate setting to "Ignore"

SSL Settings > Client Certificates

Both 'Accept' and 'Require' will both challenge for a client side cert

  1. Recycle your app pool and re-launch your browser to test

Note: SSL settings are inherited from your Site > Application, so you may need to apply these SSL Settings at multiple levels

Further Reading: