DMZ Error when opening Self Service site: "System.Security.Cryptography.CryptographicException" (130737)

After installing Password Manager’s Self Service and Helpdesk sites on your standalone server, it is possible to encounter difficulties during the initialization process. Upon reviewing the Password Manager event log, you may encounter:

Result: CriticalError
Info: System.Security.Cryptography.CryptographicException: The system cannot find the file specified.

at System.Security.Cryptography.X509Certificates.X509Store.Open(OpenFlags flags)
at QPM.Common.Helpers.CertificateHelper.d__6.MoveNext()
at System.Linq.Enumerable.WhereSelectEnumerableIterator`2.MoveNext()
at System.Collections.Generic.List`1..ctor(IEnumerable`1 collection)
at System.Linq.Enumerable.ToList[TSource](IEnumerable`1 source)
at QPM.UI.Common.MVC.Controllers.InitializationController.Index()
at lambda_method(Closure , ControllerBase , Object[] )
at System.Web.Mvc.ReflectedActionDescriptor.Execute(ControllerContext controllerContext, IDictionary`2 parameters)
at System.Web.Mvc.ControllerActionInvoker.InvokeActionMethod(ControllerContext controllerContext, ActionDescriptor actionDescriptor, IDictionary`2 parameters)
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass37.<>c__DisplayClass39.

<BeginInvokeActionMethodWithFilters>b__33()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass4f.

<InvokeActionMethodFilterAsynchronously>b__49()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass37.

<BeginInvokeActionMethodWithFilters>b__36(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass25.

<>c__DisplayClass2a.b__20()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass25.

b__22(IAsyncResult asyncResult)

Possible issue with installation and/or Application Pool account permissions.

WORKAROUND

Solution 1

1) Open IIS and navigate to the site’s application pool

2) Under the site’s app pool advanced settings change the Load User profile setting to TRUE

3) Restart IIS

4) Go through the site’s initialization process

1) Uninstall Password Manager from the standalone server

2) Confirm that local permissions are granted to the service and application pool accounts (Administrators and IIS_IUSR)

3) Reboot the server and login with the Password Manager  service account

4) Reinstall Password Manager

Note: It is possible to revert back change the made on step 1) as it was only required to perform the initialization process.