Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I used aspnet_regiis to create an RSA key container (machine container).

I want to secure it and I know I can use the -pa and -pr commands to specify access. But is there a way to see which accounts/groups have access to it?

My concern is I created a container that is basically an open book that anyone can access on this machine and get the private key.

share|improve this question

migrated from Nov 14 '12 at 9:43

This question came from our site for professional and enthusiast programmers.

up vote 5 down vote accepted

Machine Keys are stored in: %ProgramData%\Microsoft\Crypto\RSA\MachineKeys

They have normal file permissions, you can view as you'd like. Be careful changing permissions, they're easy to screw up.

share|improve this answer
You are my hero, the wind beneath my wings. Not sure why this eluded me -- I was aware of this storage location but for some reason I was thinking these key containers were "magic". Thank you! – kingdango Nov 20 '12 at 17:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.