I'm building some configuration management scripts that need to be idempotent. I need to check if the IIS keys for the web farm have been imported on a server and if not import them.

I've got the commands to do the import, but I can't seem to find a consistent way to check that a particular set of keys has been imported.


The only thing I'm coming up with at this point is to export the IIS keys from the server with

aspnet_regiis -px "iisConfigurationKey" "D:\iisConfigurationKey.xml" -pri 

and compare the files, but that is kind of heavyweight to run frequently through the day as my configuration management tool checks the state of the system. I could put a timer on it, like only export every hour or every eight hours, but then I can't catch deviations as quickly.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.