To complement @Thomas answer...

In most instances you should be good with running

certutil -csp "Microsoft Strong Cryptographic Provider" -repairstore my "<cert serial number>"

This will force certutil to only use the provider most commonly used for handling private keys in Windows and opt out of any Smart Cards.