Keyset does not exist

Q:當以 asp.net 取得 local computer 之 X509 certificate private key 時，會發生"Keyset does not exist" 原因：asp.net 之預設帳號 "Network service" 沒有取得 private key 的權限。 解法：

1. 授權 \Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys 給 Network service ，Full Control (好像太大了)
2. aspnet_regiis -pa "NetFrameworkConfigurationKey" "NT Authority\Network Service"

參考

  How to: Make X.509 Certificates Accessible to WCF