Find all literal machineKey decryptionKey and decryptionKey topics and replace key with [your key here]

[Rick-Anderson]

This is about configuring the machine keys in the web.config for web-farm like scenarios. The problem is that the configuration snip from the articles list a configuration sample containing machine key values. It seems that we have quite a few customers that have been copying and pasting this directly into their production configurations without any afterthoughts – and some of them have been compromised by ViewState injection attacks

• Work item to remediate all literal keys here.
• Work item to apply regex across all the legacy repo.
• Add See Appendix A: How to generate a element for instructions on generating keys.
• Search found validation_key and decryption_key as in this topic.
• Search used: site:https://learn.microsoft.com/en-us/ "machineKey" "validationKey"
• Fixed example
• related Pseudo Find all literal machineKey decryptionKey and decryptionKey #34366 Fix those in the next round.
• Validate all locals of machineKey decryptionKey have been remediated #34369
• First fixed article. And the PR to fix it.

List to fix

• https://learn.microsoft.com/en-us/purview/sit-defn-asp-net-machine-key
• https://learn.microsoft.com/en-us/powershell/module/sharepoint-server/set-spmachinekey?view=sharepoint-server-ps
• https://learn.microsoft.com/en-us/archive/msdn-technet-forums/e568bfe9-4fa2-4187-ac01-7d849b0d2f9d
• https://learn.microsoft.com/en-us/powershell/module/sharepoint-server/set-spmachinekey?view=sharepoint-server-ps
• https://learn.microsoft.com/en-au/answers/questions/1723227/validate-antiforgery-token-genereted-by-aps-net-mv
• Find all literal machineKey decryptionKey and decryptionKey topics and replace key with [your key here] #34365
• https://learn.microsoft.com/en-us/previous-versions/aspnet/44w5aswa(v=vs.100)
• https://learn.microsoft.com/en-us/troubleshoot/developer/webapps/iis/www-authentication-authorization/troubleshooting-forms-authentication
• https://learn.microsoft.com/en-us/answers/questions/1388936/application-pool-requested-a-recycle-because-it-re
• [ ]

---

Associated WorkItem - 354961