Full Trust Provider Hosted App - Cert folder permission

This is something I wouldnt worry about on my dev environment, since my app pool account is also my farm admin  since I use a single account for everything. But this is important when deploying an app to test/production.


On the SharePoint server, be sure that the app pool identity for the following IIS app pools have Read rights to the C:\Certs folder:

• SecurityTokenServiceApplicationPool
• The app pool that serves the IIS web site that hosts the parent SharePoint web application for your test SharePoint website. For the SharePoint – 80 IIS website, the pool is called OServerPortalAppPool.

Source: http://msdn.microsoft.com/en-us/library/office/fp179901(v=office.15).aspx