Failed to decrypt using provider rsaprotectedconfigurationprovider error

Asked by:. Archived Forums. Web Farms for IIS 7 and above. Sign in to vote. User posted Our ASP. There are two servers that have been load-balanced for many years. Wednesday, March 21, AM. User posted I tried decrypting the web. The same server where the issue occurred is not allowing me to decrypt the file. User posted Hi HC4u, It looks like the rasprotectedconfigurationprovider failed to decrypt the web.

It also would not be possible to export client's RSA on the server to make this happen or provide servers RSA for security reasons. The content you requested has been removed. Ask a question. Quick access. Search related threads. Remove From My Forums. Answered by:. Archived Forums. Configuration and Deployment of ASP. NET applications - web. Sign in to vote. User posted Hi, after many hours I finally encrypted the "ConnectionString" part of my web.

Thanks for helping me to undertand this issue, have a great weekend, polynaux. I have a solution that contains Windows Service Application. This application has app. To encrypt these sensitive information, i am using the protectsection and unprotectsection with 'RsaProtectedConfigurationProvider'.

I have created a console application in the same solution. These console application calls the protectsection method of class "UsingRsaProtectedConfigurationProvider" while encrypting. These console application is executed first to encrypt the app.

However, when i start the windows service, it gives me an error "Failed to decrypt using provider 'RsaProtectedConfigurationProvider'. Error message from the provider: The RSA key container could not be opened. Config line 16 ". GetSection String configKey. GetSection String sectionName. ServiceQueuedMainCallback Object state.

Decrypt XmlNode encryptedNode. Hence, we need to create, export the encryption key on your machine, and then import the encryption key on the other machine, which will host the web project. The following link demonstrates how to do that. However, we may don't have the permission to import key on the host server.