title: ServiceFabric standalone: Failed to get private key file
body: <p>I have a standalone ServiceFabric cluster (3 nodes). I created SSL certificate for server and client authorization. Then I assign certificate thumbprint to a cluster config. Everything work okey( cluster health is Ok and my applications works as well. But there are a lot of errors in Microsoft-ServiceFabric/Admin log. Following warning and errors are writing to log every minute:</p>
  
  <ul>
  <li>CryptAcquireCertificatePrivateKey failed. Error:0x80090014 </li>
  <li>Can't get    private key filename for certificate. Error: 0x80090014 </li>
  <li>All tries to    get private key filename failed. </li>
  <li>Failed to get the Certificate's    private key. Thumbprint: {Cert
  Thumbprint}. Error: E_FAIL</li>
  <li>Failed to    get private key file. x509FindValue: {Cert Thumbprint}, 
  x509StoreName: My, findType: FindByThumbprint, Error E_FAIL</li>
  <li>SetCertificateAcls failed. ErrorCode: E_FAIL Can't ACL</li>
  <li>FabricNode/ServerAuthX509FindValue, ErrorCode E_FAIL</li>
  </ul>
  
  <p>I assinged write permitions to private keys storage for NETWORK SERVICE and SYSTEM. As well I assigned gMSA account for PK storage. But errors still apears in log.
  From the other hand everything looks fine, cluster up and running...
  Here is my cluster config (security part):</p>
  
  <p>"security":{<br>
       "ServerCredentialType":"X509",
       "ClusterCredentialType":"Windows",
       "WindowsIdentities":{<br>
          "ClustergMSAIdentity":"gMSAccountName@domain.com",
          "ClusterSPN":"http/servicefabric"
       },
       "CertificateInformation":{<br>
          "ServerCertificate": {
                 "Thumbprint": "{Cert Thumbprint}",
                 "X509StoreName": "My"
             },
          "ClientCertificateThumbprints":[<br>
             {<br>
                "CertificateThumbprint":"{Cert Thumbprint}",
                "IsAdmin":true
             }
          ],
          "X509StoreName": "My"
       }
    },</p>
  
  <p>For x509 certificated creation I used OpenSSL 1.0.2k-fips  26 Jan 2017. I follow the steps from this article: <a href="https://gist.github.com/harishanchu/e82d759c0235379d1778f799992b5774" rel="noreferrer">https://gist.github.com/harishanchu/e82d759c0235379d1778f799992b5774</a>
  Could anyone clarify this issue?</p>