'MANAGE PRIVATE KEYS' option missing

c# wcf wcf-security x509certificate
Alex picture Alex · Jan 15, 2013 · Viewed 27.6k times · Source

I'm developing WCF service with Transport Security hosted on IIS 7.5 under Windows 2008R2. I have a certificate, generated in IIS 7.5 which is stored in Local folder.

When I use BasicHttpBinding or WSHttpBinding with Transport Security - everything works fine. But when I change it to NetTcp I get an exception :

 CryptographicException 'Keyset does not exist'.

After a bit of googling I found out that the problem can be because my NETSERVICE IIS account doesn't have premission to the private key of my certificate.

The solution could be to set the rights to accesss in MMC by right-clicking on my certificate and selecting "MANAGE PRIVATE KEYS" option. But there is no such option in the select menu!!! The Certificate was created under administrator account and where I open it - it says, that it has private key. What I'm I doing wrong?

Answer

Manish Jain picture Manish Jain · Mar 19, 2014

Go to server -> click Start -> Run -> type mmc -> enter -> select Certificates snap-in with Local Computer option -> Go to Console Root-> Certificates-> Personal-> Certificates-> Select a cert-> Right click-> Go to All tasks-> Manage Private Keys-> Add permissions

Related questions

Signing SOAP messages using X.509 certificate from WCF service to Java webservice

It's my first question over the web. Hope it will make sense. I have seen several blogs related to this issue over the Web, and I have tried few of the ideas presented in them with no success. Here's my …

Read More
How to get the X509Certificate from a client request

I have a web-service which I secured using certificates. Now, I want to identify the client by looking at the certificate thumbprint. This means that I have a list of thumbprints on my service somewhere that are linked to some …

Read More
The identity check failed for the outgoing message. The expected identity is

Had a wcf service running fine on my machine. Moved it to a server and am now getting the above error. I produced a test certificate on the server. Heres my client config. <?xml version="1.0" encoding="utf-8" ?> <…

Read More