I have a windows 2022 gold template used deploying machines. A winrm https listener is setup initially to allow encrypted communication between setup servers and the new machine being deployed. The self-signed cert is local and only used during initial connection.
Afterwards, the cert is replaced on the winrm https listener. After sysprep, the private key is gone with the error below. The winrm listener remains. Any ideas? I tried a workaround of exporting, marking the keys exportable and re-importing, setting up the winrm listener again. 