We have added a self-signed certificate when setting up AD FS, and now want to update the service communications certificate to our domain's wildcard cert. Following these instructions: http://support.microsoft.com/kb/2504439.
We imported the new certificate to computer certificate store but do not see an option to manage private keys. Verified logged in as domain admin (who should be able to manage certificates).
certutil -repairstore my * returns an ACCESS DENIED error message.