How to set x509 Certificate private key access rights for AppPoolIdentity

If your website uses the AppPoolIdentity and requires access to the private key of an x509Certficate, you’ll need to grant the read permissions to the iis application pool.

To grant permissions to the AppPoolIdentity:

Run Certificates.MMC (or Start->run->mmc.exe, Add Certificate Snap-In for LocalMachine)
Select the certificate (Personal node on the certificate tree) , right click and Manage Permissions.
Add a new user to the permissions list.
Enter “IIS AppPool\AppPoolName” on the local machine”. Replace “AppPoolName” with the name of your application pool.

This article is part of the GWB Archives. Original Author: What Was I Thinking?

Related Posts

Replatforming Guide: Pros, Cons, and Impact

Deciding to replatform is no small feat; it’s like setting sails for new horizons with your digital presence. Weighing the

Cypress vs Selenium: Why Cypress is Better!

Navigating the competitive landscape of web testing tools, Cypress emerges as a noteworthy contender, outshining Selenium with its cutting-edge advantages.