$rsa = [System.Security.Cryptography.X509Certificates.RSACertificateExtensions]::GetRSAPrivateKey($cert)
$keyName = if ($rsa -is [System.Security.Cryptography.RSACng]) {
$rsa.Key.UniqueName
} else {
$rsa.CspKeyContainerInfo.UniqueKeyContainerName
}
$keyFile = Get-ChildItem "$env:ALLUSERSPROFILE\Microsoft\Crypto" -Recurse -Filter $keyName -ErrorAction SilentlyContinue |
Select-Object -First 1
"Key file: $($keyFile.FullName)"
icacls $keyFile.FullName /grant "*S-1-5-20:(R)"
Restart-Service TermService -Force