Hello, World (from dbdummy)
Right-click the certificate, select All Tasks > Manage Private Keys, and then grant full permissions to the SQL Server service account.
Setup notes in vscode/notes