The "Network Service" does not have permission to read the client certificate (WEC) (4234060)

The "Network Service" does not have permission to read the client certificate (WEC)

When using WEC (Windows Event Collector) the connection cannot be established and the following error(s) are seen:

<f:WSManFault xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault" Code="995" Machine="example.ad.domain.com"><f:Message>WS-Management cannot process the request. The operation failed because of an HTTP error. The HTTP error (2148074279) is: An unknown error occurred while processing the certificate. . </f:Message></f:WSManFault>.

995 (HTTP error 12186): The "Network Service" does not have permission to read the client certificate.

There is a known defect found in a recent Microsoft update in which the Network Service account in Windows becomes corrupted and can no longer read the certificate on the system for log forwarding.

Please rename and move the Network Service profile.

Once done, please reboot the server. The Network Service profile will re-create itself and should begin to function with WEC after the reboot.

A similar error message also is related to NETWORK SERVICE being unable to read the certificates: The forwarder is having a problem communicating with subscription manager at address https://logs02.domain.local:5986/wsman/SubscriptionManager/WEC. Error code is 995 and Error Message is WS-Management cannot process the request. The operation failed because of an HTTP error. The HTTP error (12186) is: The client certificate credentials were not recognized. . . The resolution in this case is to allow NETWORK SERVICE access to all certificate private keys installed on the computer.