title: New-SelfSignedCertificate to create certificate gives Access Denied
body: <p>I'm trying to use <code>New-SelfSignedCertificate</code> in PowerShell to create a certificate on Windows 10, but the command gives me a permissions error. I'm using an Administrator account.</p>
  
  <p>Command:</p>
  
  <pre><code>New-SelfSignedCertificate -Type Custom -Subject "CN=Contoso Software, O=Contoso Corporation, C=US" -KeyUsage DigitalSignature -FriendlyName MyCert -CertStoreLocation "Cert:\LocalMachine\My"
  </code></pre>
  
  <p>Output:</p>
  
  <pre><code>New-SelfSignedCertificate : CertEnroll::CX509Enrollment::_CreateRequest: Access denied. 0x80090010 (-2146893808 NTE_PERM)
  At line:1 char:1
  + New-SelfSignedCertificate -Type Custom -Subject "CN=Contoso Software, ..."
  + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      + CategoryInfo          : NotSpecified: (:) [New-SelfSignedCertificate], Exception
      + FullyQualifiedErrorId : System.Exception,Microsoft.CertificateServices.Commands.NewSelfSignedCertificateCommand
  </code></pre>