1. Open IIS and navigate to your web site or application and go to the SSL settings

  [![IIS Settings > SSL Settings][1]][1]

2. Set the Client Certificate setting to "Ignore"

  [![SSL Settings > Client Certificates][2]][2]

  Both 'Accept' and 'Require' will both challenge for a client side cert

3. Recycle your app pool and re-launch your browser to test

**Note**: SSL settings are inherited from your Site > Application, so you may need to apply these SSL Settings at multiple levels


**Further Reading**:

* [Why does google chrome prompts to "select a certificate to authenticate yourself"](https://stackoverflow.com/q/26382109/1366033)
* [How to prevent browser from prompting for a client certificate and allow the IIS to accept it (not require it)?](https://serverfault.com/q/667285/176522)

  [1]: https://i.stack.imgur.com/sfJ0K.png
  [2]: https://i.stack.imgur.com/MqByP.png

We have an application deployed to IIS and every time we connect to it, we get the following browser prompt:

> Select a certificate to authenticate yourself to *sitename*

[![Select a Certificate prompt][1]][1]

We do not have a reason to challenge for a client certificate and seems like this setting was introduced by mistake

How can we remove it?

**Research**:

* This question on [How can I prevent browsers from prompting Users for a Client Certificate?](https://stackoverflow.com/q/54292661/1366033) looks similar, but doesn't have an answer yet, and also is about setting this up on [tag:kestrel-http-server]

* This question on [Browser is not prompting for a client certificate](https://stackoverflow.com/q/15014288/1366033) is for how to *make sure* there is a prompt, and didn't provide enough hints as to how to prevent one

  [1]: https://i.stack.imgur.com/K9zG8.png