Client Certificate from the User Store to the Local Machine Store
August 18th, 2010
1 comment
If a service application such as ASP.NET Web application cannot access a client certificate that other applications like console applications can access, then the client certificate may not be stored in the local machine. You can understand that something like that may be happening if you get the error:
Could not create SSL/TLS secure channel for your Web Request and you can’t understand what is going wrong while it might be ok at your development machine but when you try to publish it you get this error.
So let’s copy a client certificate in the local user store to the local machine store by using the Certificate Export Wizard following the steps below:
- Click Start, click Run, type mmc, and then click OK.
- On the File menu, click Add/Remove Snap-in, and then click Add.
- In the Add Standalone Snap-ins dialog box, click Certificates, click Add, click Computer account, click Next, and then click Finish.

- In the Add Standalone Snap-ins dialog box, click Certificates, click Add, click My user account, and then click Finish.

- Click Close, and then click OK.

- To export the client certificate from the local user store, follow these steps:
- Expand Certificates – Current User, expand Personal, and then click Certificates.

- Right-click the client certificate, click All Tasks, click Export, and then click Next.

- Click Yes, export the private key, and then click Next two times.

- In the Password box and in the Confirm Password box, type a password, and then click Next.

- In the File name box, type a file name. Click Next, and then click Finish.

- In the Certificate Export Wizard dialog box, click OK.

- Expand Certificates – Current User, expand Personal, and then click Certificates.
- To import the client certificate to the local machine store, follow these steps:
- Expand Certificates (Local Computer), and then expand Personal.

- Right-click Certificates, click All Task, click Import, and then click Next.

- In the File name box, type the file name that you specified in step 6e, and then click Next.

- In the Password box, type the password that you specified in step 6d, and then click Next two times.

- Click Finish, and then click OK.

- Expand Certificates (Local Computer), and then expand Personal.