Home/ Questions/Q 6141323
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-23T18:14:09+00:00

We have Windows Service with tcp binding. It has a transport security mode and

  • 0

We have Windows Service with tcp binding. It has a transport security mode and client credential type is Windows. Service is within a domain.

Now we want to make calls to this service from the ASP.NET application running on IIS which is not part of the domain. We don’t need user impersonation. What is the most secure way to enable this sort of communication?

This is a pretty standard situation: Web server is in DMZ and I would like to know how to set a secure communication with WCF backend services.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I expect that it will not work. You cannot use Windows client credential type if you want to consume the service outside of your domain. You must use Certificate (or None but it means no authentication).

    The difference is that Windows client credentials will create stream secured with SSPI whereas Certificate and None client credentials will create stream secured with SSL certificate. In case of Certificate client credentials each client will be identified by its own certificate (= you need one for your IIS server).

    • 0