rsa encrtyption



I created a key for encrypting my web.config

aspnet_regiis -pz WebEncryptionKeys
aspnet_regiis -pc WebEncryptionKeys -exp

exported them
aspnet_regiis -px WebEncryptionKeys c:\WebEncryptionKeys_Public.xml -pri

imported them to developers and server machines
aspnet_regiis -pi "WebEncryptionKeys" "c:\WebEncryptionKeys_Public.xml "


Then in MsBuild I run
<Target Name="AfterBuild">
<Exec WorkingDirectory="$(OutputPath)"
Command="$(Registry:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSBuild\ToolsVersions\2.0@MSBuildToolsPath)aspnet_regiis.exe
-pef connectionStrings $(OutputPath) -prov HrCustomProvider" />

This works fine from my machine, the web.config gets encrypted and moved to
the server.
However, if a co-worker runs the same msBuild on her machine, we get a bad
data error when the website is hit on the server. If I deploy to the server,
she can logon to the server and encrypt and decrpyt the web.config.

I re-imported the encryption keys to her machine with the same results.

The only thing I can think of is that her machine is using a different
version of the encrtyption algorithims?

So I had her run windows update on her machine, couple things got updated
sql server mostly.

I logged on to her machine, deployment worked.
She logged on to her machine, deployment worked.

The keys were created months ago. Any idea what happened?

.



Relevant Pages

  • criticism of web based password manager requested
    ... browser using javascript before being pased to the server. ... password for encrypting all of these is never sent to the server or ... Everything is associated with a user identified by an MD5 hash of their ... created a verification string is generated on the client browser using ...
    (sci.crypt)
  • LDAP, MD5, and password changes
    ... Here is my dilemma- We have SunONE Directory Server 5.2 patch 2. ... Previously, user passwords were encrypted using simple crypt, but we ... wanted to harden the mechanism and tested using MD5. ... We are encrypting ...
    (SunManagers)
  • Re: rsa encrtyption
    ... imported them to developers and server machines ... Then in MsBuild I run ... she can logon to the server and encrypt and decrpyt the web.config. ... The keys were created months ago. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: EFS and IIS
    ... IIS may want to impersonate other identities at some future point. ... Encrypting the files in one place while there are hundreds of other copies ... floating around on various client hard drives is arguably of limited use. ... > Windows 2000 Server Running IISv5. ...
    (microsoft.public.inetserver.iis.security)
  • CryptImportKey
    ... To secure the transmission i use public key encrypting. ... The privatekeyblob goes with the server and the publickeyblob exists in the client application. ...
    (microsoft.public.platformsdk.security)