RSA 密钥库权限
从昨天开始,我无法使用 sn.exe 或通过也使用 sn.exe 的 Visual Studio 生成强名称密钥。
当尝试生成密钥文件时,执行以下 cimmand
sn - k "key file.snk"
sn.exe 然后响应“
无法生成强名称密钥对 -- 访问被拒绝”。
在运行 Process Monitor 时重复此过程后,我现在知道 sn.exe 被拒绝访问的位置都位于以下目录
\ProgramData\Microsoft\Crypto\RSA\MachineKeys
查询此文件夹的权限显示,Everyone 和 Administrators组没有任何权限,NETWORK SERVICE 帐户具有完全控制权。
昨天,我安装了 SourceGear Fortress,它确实使用网络服务帐户,但这是问题发生之前对系统的唯一重大更改。
所有人和管理员都没有 RSA 密钥存储的权限,这正常吗?
Since yesterday I haven't been able to generate strong name keys using sn.exe or through Visual Studio which also uses sn.exe.
When attempting to generate a key file the following cimmand is executed
sn - k "key file.snk"
sn.exe then responds with
Failed to generate a strong name key pair -- Access is denied.
After repeating this process while running Process Monitor I now know that the locations to which sn.exe is denied access all reside within the following directory
\ProgramData\Microsoft\Crypto\RSA\MachineKeys
Querying the permissions of this folder reveals that the Everyone and Administrators groups have no rights and the NETWORK SERVICE account has Full Control.
Yesterday, I installed SourceGear Fortress which does use the NETWORK SERVICE account, however that is the only sicnificant change to the system prior to the issue occuring.
Is it normal for Everyone and Administrators to have no rights to the RSA key store?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
恢复我的用户帐户对 MachineKeys 目录的读写权限后,我再次能够生成密钥
After restoring Read and Write permissions to my user account for the MachineKeys directory I was again able to generate keys