The WCF application cannot find the X.509 Certificate solution under the iis7 host.

The certificate is reported by CurrentUser.

The X.509 certificate cannot be found using the following search criteria:
StoreName "My", StoreLocation "CurrentUser", FindType "FindBySubjectName", FindValue "WCFServerCertificate ".

The reason is: IIS7's default account is Network Service and may not have access to the certificate private key in the Store.

Solution:

1. Add "Certificate-current user" and "Certificate (Local Computer)" to the "certificate" Control Unit in mmc )"

 

Export the certificate from "Certificate-current user" and then import it to the corresponding directory of "Certificate (Local Computer.

2. Original Server Configuration

<ServiceCertificate findValue = "MyServer" storeLocation = "CurrentUser"
X509FindType = "FindBySubjectName"/>

Changed:

<ServiceCertificate findValue = "MyServer" storeLocation = "LocalMachine"
X509FindType = "FindBySubjectName"/>