Failed authorization on windows


I need some help. I would like to install a certificate. I am running windows Server 2012.
When it comes to the challenge / response it fails

Scanning IIS Site Bindings for Hosts
1: IIS (%SystemDrive%\inetpub\wwwroot)
2: IIS (%SystemDrive%\inetpub\wwwroot)

W: Generate a certificate via WebDav and install it manually.
F: Generate a certificate via FTP/ FTPS and install it manually.
M: Generate a certificate manually.
A: Get certificates for all hosts
Q: Quit
Choose from one of the menu options above: A
Authorizing Identifier Using Challenge Type http-01
Writing challenge answer to C:\inetpub\wwwroot.well-known/acme-challenge/gJeek2ebWCb1n2bIqpN1Yp3-0-9cIDCnQ9Il34yYL0
Writing web.config to add extensionless mime type to C:\inetpub\wwwroot.well-known\acme-challenge\web.config
Answer should now be browsable at
Submitting answer
Refreshing authorization
Refreshing authorization
Authorization Result: invalid
Authorization Failed invalid

The ACME server was probably unable to reach

Check in a browser to see if the answer file is being served correctly.
Authorize failed: This could be caused by IIS not being setup to handle extensionless static files.Here’s how to fix tha
1.In IIS manager goto Site/ Server->Handler Mappings->View Ordered List
2.Move the StaticFile mapping above the ExtensionlessUrlHandler mappings. (like this

3.If you need to make changes to your web.config file, update the one at D:\LetsEncrypt\web_config.xml

But the page can be reached :slight_smile:

What I did wrong ?

Thanks in advance.


Your web server is reachable at its IPv4 address,, but not at its IPv6 address,

1 Like

Thank you so much !!!
I didn’t know IP v6 was needed :wink: (maybe a more explicit message would had help)
You are a star. I corrected the firewall rules and this works perfectly now.
Have a very nice day.


1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.