Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I used aspnet_regiis to create an RSA key container (machine container).

I want to secure it and I know I can use the -pa and -pr commands to specify access. But is there a way to see which accounts/groups have access to it?

My concern is I created a container that is basically an open book that anyone can access on this machine and get the private key.

share|improve this question

migrated from stackoverflow.com Nov 14 '12 at 9:43

This question came from our site for professional and enthusiast programmers.

1 Answer 1

up vote 3 down vote accepted

Machine Keys are stored in: %ProgramData%\Microsoft\Crypto\RSA\MachineKeys

They have normal file permissions, you can view as you'd like. Be careful changing permissions, they're easy to screw up.

share|improve this answer
1  
You are my hero, the wind beneath my wings. Not sure why this eluded me -- I was aware of this storage location but for some reason I was thinking these key containers were "magic". Thank you! –  kingdango Nov 20 '12 at 17:05

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.