I had the same problem doing SET WITNESS using certificates with 3 instances of SQL on the same server. 

Then I found an article on msdn support that said the ACL...