...
Open certmgr with Administrator permissions and go to Current User → Personal → Certificates.
Right-click VelocityTLS certificate → All Tasks → Manage Private Keys...
Select the user VelocityServices and click the Remove button.
Add again the VelocityServices user and grant Full control. Click OK.