Re: Error with Encrypting identity section of web.config

Actually Dominick it does work just fine. The initial problem with the
web.config file was a missing "<" character for a remark which was causing
the error. I then ran into another error saying that it could not open the
Custom Provider Container. I then ran the following command on both web
servers to ensure that the NetworkService Account had the necessary ACLs on
that custom provider container:
aspnet_regiis -pa "CustomKeys" "NT Authority\Network Service"

That fixed the issue and allows us to use the aspnet_regiis tool to provide
RSA encryption of the identity section of the web.config.

Thanks though!!

Lane

"Dominick Baier [DevelopMentor]" wrote:

You cannot encrypt the identity section using ProtectedConfiguration...

This settings has to be read by the ISAPI extension before it calls into
the HttpRuntime. Thats too early for protected configuration

for these special section there's a tools called aspnet_setreg

http://support.microsoft.com/kb/329290


---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

I am deploying a asp.net 2.0 web app to a server farm and have
followed the

instructions from

http://channel9.msdn.com/wiki/default.aspx/Channel9.HowToEncryptConfig
urationSectionsUsingRsaInAspNet20?diff=y

and

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag
2/html/PAGHT000006.asp

and specifically the section of those pages that involves deploying
the

encryption in a webfarm environment. Those pages talk about
encrypting the

ConnectionStrings section, but not the identity section. After
hunting

around I found that the command I needed to encrypt only that section
is

aspnet_regiis -pe "system.web/identity" -app "/WebFarmRSA" -prov

"CustomProvider". This successfully encrypts the web.config, but now
when I

browse to the site I get the following error:

================================================

Server Error in '/' Application.

----------------------------------------------------------------------
----------

Configuration Error Description: An error occurred during the
processing of a configuration file required to service this request.
Please review the specific error details below and modify your
configuration file appropriately.

Parser Error Message: Unrecognized element.

Source Error:

Line 107: </CipherData>
Line 108: </EncryptedData>
Line 109: </identity>
Line 110: !-- AUTHORIZATION
Line 111: This section sets the authorization policies of the
application. You can allow or deny access
=====================================================

So I am wondering if there is a specific problem since the identity
section is a subsection of system.web, or where exactly the problem is
on this. This is all on a Windows Server 2003 SP1 64Bit box running
Framework ASP.NET Version:2.0.50727.42. Any help would be most
appreciated!!

Thanks,

Lane




.

Relevant Pages