I totally agree something changed on the system; I'm working up those channels to figure out what that is, but I'm being asked "what I need", not "what they broke"; which is frustrating.
To clarify, the permissions on CertSvc\Configuration are inherited, the permissions are the effective permissions of my userid on those keys.
To clarify, the permissions on CertSvc\Configuration are inherited, the permissions are the effective permissions of my userid on those keys.