I can successfully add the cert but can t quite figure out how to grant security to the private key. Then from personal store move the newly created cert to remote desktop. Machine keys are also used to verify out of process session state.