Can we get PermissionEx added to iis:Certificate?

[MikeFarrington]

In converting an installer to v4, and having watched all of Rob's Deployment Dojo video series, I'm inspired to eliminate as many custom actions as possible.

In one of the videos, Rob used PermissionEx apply permissions via SDDL syntax to a folder created with CreateFolder. I am in need of doing the same to a certificate. We deploy an SQL AlwaysEncrypted certificate to StoreLocation="localMachine" via iis:Certificate. However, we need the private key to be exposed to AuthenticatedUsers. Since Calcs.exe can be used to set permissions on a certificate using SDDL syntax, I was hoping it wasn't too much of a leap to extend PermissionEx to Certificate deployment?

[robmen]

You certainly could try. The code that creates the cert is here, and there are a few layers above that to thread any data you need down..