Modify IIS 7 Authentication for FIM CM
Applies To: Forefront Identity Manager Certificate Management
You must also ensure that Kernel-mode authentication is disabled on the computer that hosts the FIM CM Portal.
To disable Kernel-mode authentication
On the planned FIM CM server, click Start, click Administrative Tools, and then click Internet Information Services Manager. Enter the appropriate credentials to open IIS Manager as an administrator, if necessary.
Expand Sites, Default Web Site, and then click CertificateManagement
In the center pane, scroll down and double-click Authentication
Right-click Windows Authentication, and then click Advanced Settings
Clear Enable Kernel-mode authentication and then click OK.