Authentication problems using SSL.
i'm trying install team foundation use on internet, assumption clients not members of team foundation server's domain. in order reduce server's attack surface, goal expose server ip address only, , require clients to connect server using ssl, client certificates, , arbitrary port. example, server path might like: https://1.2.3.4:5/ my infrastructure consists of offline root ca, domain controller, , single-deployment team foundation server. imported root ca certificate domain controller, , issued server certificates domain controller , server. built standalone client, installed team explorer, , issued user certificate client's login account. basic infrastructure functions correctly: https client's internet explorer test ssl site on server work, login non-ssl team explorer server. however, when attempt ssl login team explorer, keep getting authentication errors. can provide insight problem? many thanks. david quick qu...