A while ago I wrote how to set ACLs on a private key container.

Today I spotted a new context menu item in the “Certificates” MMC snap-in on Vista. Right-click a certificate and select “All Actions->Manage Private Key” to get to the ACL dialog of the key container. nice!