(Disclaimer: I have posted this question on StackOverflow, but from a developer point of view. I tried to rewrite the question to fit ServerFault conditions)
A custom service has to log on a remote server through an HTTPS connection, so with an SSL certificate (Windows 2008 Server SP2).
I followed Microsoft's instructions to install a certificate for a service account with MMC. The certificate is (self-signed) installed in Trusted Root Certification Authorities Certificate store. So I added a Certificate Snap-in added the certificate for the service account. Then I saved the console file somewhere, but I don't know if it's useful (I suppose the changes are effective immediately?).
The certificate is visible in the registry (<ServiceName>
is the name of the service):
HKLM\SOFTWARE\Microsoft\Cryptography\ Services\<ServiceName>\SystemCertificates\Root\Certificates\<digitalFootprint>
However, the service doesn't find the certificate (the store is assumed to be of type X509).
I experienced a similar problem when trying to install a certificate for a user with certmgr.msc. I had to log as the user, install it through Internet Explorer to make it work.
Did I miss something?