1. This tool will generate a valid random machine key used by ASP.NET for encryption, decryption, validation of forms-authentication and view-state data, and other purposes. Select your target version of ASP.NET and click the Generate Keys button.
2. The all-in-one ultimate online toolbox that generates all kind of keys! Every coder needs All Keys Generator in its favorites! It is provided for free and only supported by ads and donations.

AES Encryption (Machine Key) not validating user on IIS

Jul 14, 2017 12:05 PMRohit RaoLINK

According to this Technet article, I need to: Generate a validation key and decryption key by using the autogenerate functionality provided by the.NET Framework. The step does not explain how to.

Hi,

I am using Asp.net membership in my application. We were using SHA256 for validation and 3DES for decryption (Asp.net membership) in machine key in Web.config.

Now my requirement is to use AES encryption for both. I created Keys from IIS and added in my Web.config.

<machineKey validationKey='XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX,IsolateApps' decryptionKey='XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX,IsolateApps' decryption='AES' validation='AES'/>

Using That configuration setting, i updated password of 1 of my user in development environment. /battlefield-3-origin-key-generator.html.

MembershipUser mu = Membership.GetUser('UserName');
mu.ChangePassword(mu.ResetPassword(), 'Password');

After that i ran the application to test my password on development machine using below code & it was returning true:

bool b = Membership.ValidateUser('UserName', 'Password');

But when i published the website on IIS on my local machine, It is returning FALSE.

I am not sure why it is happening as the same keys are used at both places.

Thanks

Rohit

We recommend that deployed versions of Orchard are configured with a fixed machine key rather than the default setting, which is to automatically generate the key at runtime. This default setting can cause the key to change unexpectedly, which can cause validation errors.

If you have access to the IIS management console for the server where Orchard is installed, it is the easiest way to set-up a machine key.

Start the management console and then select the web site. Open the machine key configuration:

The machine key control panel has the following settings:

Uncheck 'Automatically generate at runtime' for both the validation key and the decryption key.

Generate Machinekey Validationkey

Click 'Generate Keys' under 'Actions' on the right side of the panel.

Iis Machinekey Validation Key Generator

Click 'Apply'.

If you do not have access to the IIS management console, it is still possible to set-up a machine key for an Orchard application. /ea-sports-cricket-2007-key-generator.html.

C# Generate Machine Key

To do so, open the web.config file that is at the root of the Orchard web site. The machine key settings can be found or created under configuration/system.web:

Iis Machine Key Generator

To create the keys that go into the placeholders above, you can use one of the available online generators, such as: Ati 9800 xt driver for mac.