Installing the certificate
Download the Pluralsight SelfCert from the link given at the beginning of the article. Run the tool as Administrator; otherwise, it will crash.
Configure the settings to install the certificate; refer the screen below.
After making the required changes, click the Save button and then you will see the screen below:
After the installation of the certificate, browse the site again, but this time, you should see a different error as shown in the screen below:
This error means that the default application pool does not have access rights to the certificate's private key, so now, we have to give read access to the default application pool to do this.
Download WinHttpCertCfg.exe from the link given at the beginning of the article. This tool is a command line tool. After installing the tool, run the following command on the command prompt as Administrator.
C:\Program Files (x86)\Windows Resource Kits\Tools>winhttpcertcfg -g -c LOCAL_MACHINE\My -s MyWebSite -a DefaultAppPool
但是这个命令执行会出错，提示No account information was found.
C:\Program Files (x86)\Windows Resource Kits\Tools>winhttpcertcfg -g -c LOCAL_MACHINE\My -s MyWebSite -a "NETWORKSERVICE"
Microsoft (R) WinHTTP Certificate Configuration Tool
Copyright (C) Microsoft Corporation 2001.
Granting private key access for account:
NT AUTHORITY\NETWORK SERVICE