Download page Private Key and Client Certificate for .NET Agents.
Private Key and Client Certificate for .NET Agents
The .NET Agent loads the client certificate and private key from your local computer's personal Certificate Store. The instrumented application identities need the ability to access the private key of the client certificate.
Import the Private Key into the Certificate Store
To import the private key into the Certificate Store:
From your Microsoft Management Console (MMC), navigate toand expand Certificates (Local computer) > Personal > Certificates.
Right-click Certificates.
Expand All Tasks > Import.
From the Import panel, change the Filter to All or .pfx files.
Select the *.pfx file.
Enter your password and then complete the import procedure.
By default, for IIS applications (Full Framework and .NET Core hosted in- and out-of-process), the IIS_IUSRS group must have read access to the private key. For standalone, self-hosted .NET Core, and IIS applications running on application pools using custom service accounts, the appropriate accounts and groups have read access to the private key.
To add read access to the private key:
From your Microsoft Management Console (MMC), navigate toand expand Certificates (Local computer) > Personal > Certificates.
Right-click Certificates.
Expand All Tasks > Manage Private Keys to display a popup.
Add the application identities or user groups (as needed) and then add read access to the private key.
Configure the Certificate Attribute
To use the certificate from the Certificate Store, you must add the certificate thumbprint as the certificate attribute.
To obtain the certificate thumbprint:
From your Microsoft Management Console (MMC), navigate to and expand Certificates (Local computer) > Personal > Certificates.