WSO2身份服务器：无法访问证书的私钥

Question

Configuration Error

Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.

Parser Error Message: ID1024: The configuration property value is not valid.

Property name: 'serviceCertificate'

Error: 'ID1039: The certificate's private key could not be accessed. Ensure the access control list (ACL) on the certificate's private key grants access to the application pool user.

Thumbprint: 'D39BF05A878A253773B7B6BFDB8B65C160C42EB4''

Line 104: </system.diagnostics>--> Line 105: <microsoft.identityModel> Line 106: <service> Line 107: <issuerNameRegistry type="Microsoft.IdentityModel.Tokens.ConfigurationBasedIssuerNameRegistry, Microsoft.IdentityModel, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"> Line 108: <trustedIssuers>

Source File: D:\\nz\\new_RPWebApp\\web.config Line: 106

Answer 1

did you try answer on Error: 'ID1039: The certificate's private key could not be accessed

I was getting same issue. The fix is, to allow the AppPool user (NETWORK SERVICE) to read the certificate private key).

• Open the MMC snap-in by running mmc.exe.
• Select File -> Add/remove snap-in. Select Certificates and click “Add”.
• Select “Computer Account”. Click Finish. Click Next.
• Drill down to Personal -> Certificates.
• Right-click your certificate and select All Tasks -> Manage private keys.
• Add NETWORK SERVICE (or the appool use) and give it “read” privileges.