aspreg_iis -pa "NT Authority\Network Service" + Windows Server 2000

[mike55]

I am using a windows 2000 server on which I am deploying a simple web application with some of the web.config elements encrypted.

I have generated a machine level key container using the following:
Aspnet_regiis

 

[Nate Bross]

I think that "Network Service" should do it. Im not sure that you need the "NT Authority" bit at the front.

 

[mike55]

Thanks for the reply Nate. "Network Service" is only available from Windows 2003 server onwards. I also tried to register the account using the aspnet_regiis -ga "Network Service" command but got back an error message telling me that the account does not exist.

Mike55.

 

[PlausiblyDamp]

What happens if you try to run the application? Are you getting any errors logged regarding the keystore?

 

[mike55]

Getting a Parser Error Message: Failed to decrypt using provider Rawhide. Error message from the provider: The RSA key container could not be opened.

Mike55.

 

[Nate Bross]

Are you doing any impersonation in your Web.config file?

Do you have annoynmouse access setup for your site? if so, does that have use a specific account (like domain\specialuser)?

If so, you may need to aspreg those accounts as well.

 

[mike55]

Allowed both of those accounts. I believe that what I am trying to do is not allowed by windows 2000 server. Trying to get access to a 2003 server and I am going to repeat the same steps and see from there.

Mike55.

 

[mike55]

Solved the problem, it would appear that I must register the name of the "CustomKey" rather than the Key name.

Mike55.