diff --git a/src/Squidex/Configurations/Identity/IdentityServices.cs b/src/Squidex/Configurations/Identity/IdentityServices.cs
index 93dfeb51a..15e67dea9 100644
--- a/src/Squidex/Configurations/Identity/IdentityServices.cs
+++ b/src/Squidex/Configurations/Identity/IdentityServices.cs
@@ -32,7 +32,10 @@ namespace Squidex.Configurations.Identity
                 var certData = new byte[certStream.Length];
 
                 certStream.Read(certData, 0, certData.Length);
-                certificate = new X509Certificate2(certData, "password", X509KeyStorageFlags.MachineKeySet);
+                certificate = new X509Certificate2(certData, "password", 
+                    X509KeyStorageFlags.MachineKeySet |
+                    X509KeyStorageFlags.PersistKeySet |
+                    X509KeyStorageFlags.Exportable);
             }
 
             services.AddSingleton(