DotNetNuke CardSpace Authentication Provider

There are some security settings that need to be set on the server in order for the module to work.

On Windows 2003 the NETWORK SERVICE account needs to be able to read the private key of your SSL certificate from the certificate store.

You can use the Microsoft SDK Utility called FindPrivateKey.exe utility to find the file on the hard disk that needs to have its permissions changed.

For example, run

findprivatekey.exe my localmachine -t "2d 74 fa 64 53 67 03 57 d0 46 a2 5b 81 3c ad d5 8f 95 a5 98" -a

This command will give you the filename of your SSL certificate.

You then need to make sure that the NETWORK SERVICE account has read access to the file.

When I was using WebHost4Life as my hosting provider they did this for me after I raised a support request.