« Previous Next »

Answered Thread: Configuration security: regenerate configProtectedData

Last post 11-07-2009 2:46 AM by anilr. 2 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (3 items)

Sort Posts:

  • 11-02-2009, 11:26 AM

    • zsuzen
    • Not Ranked
    • Joined on 09-25-2007, 3:28 PM
    • Posts 3

    Configuration security: regenerate configProtectedData

    Hi there

    I am having a problem with a restored server instance using IIS7 with custome users for some application pools. We cannot start these pools where we have the custom users running them. It seems like there is an issue with encrypted passwords (and reentering the password is not working). applicationHost.config file has been copied over and the original is not around anymore. One solution I found is to remove/add the IIS role and retain the configProtectedData section while restoring the config.

    Is there a way to re-generate the required keys in the configProtectedData without reinstalling IIS? Or any other suggestions welcome as well?

    Regards

    --Ziya

  • 11-06-2009, 10:34 PM In reply to

    Answered Re: Configuration security: regenerate configProtectedData

    Hi,

    The keys are machine specific keys. We can only export and import the keys from the original server to decrypt the encrypted sections.

    Caution while xcopying IIS 7.0 config files
    http://blogs.iis.net/webtopics/archive/2009/03/15/caution-while-xcopying-iis-7-0-config-files.aspx 

    Since the original is not around anymore, you may consider reconfigure the encrypted sections manually.

    Leo Tang
    Microsoft Online Community Support

    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
  • 11-07-2009, 2:46 AM In reply to

    • anilr
    • Top 10 Contributor
    • Joined on 05-23-2006, 10:13 PM
    • Redmond, WA
    • Posts 2,343

    Answered Re: Configuration security: regenerate configProtectedData

    You can regenrate new encryption keys using the method outlined here - note that this will not restore any existing encrypted data which is lost.

    Anil Ruia
    Senior Software Design Engineer
    IIS Core Server
Page 1 of 1 (3 items)
Microsoft Communities