Windows2003 Install Certificate Services: CSP is not configured correctly, you do not have write access to this key container

1. After filling in the CA name, prompt when generating the key: The CSP is not configured correctly or the installation is incomplete.
Cause: The possible cause for CS service (Crysptographic services) is not started.

PS: The service relies on the RPC service, but the RPC service will have two, one is RPC, the other is RPC (Locator), and my second one is not started. After startup, the installation continues.

2. Prompt when generating key: You do not have write access to this key container
Cause: C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys directory permissions are insufficient. This directory is used to place the key, possibly the so-called key container. Set the directory permission to read and write to the current user.

Windows2003 Install Certificate Services: CSP is not configured correctly, you do not have write access to this key container