IIS - Machine Key, registry keys between servers are not consistent

Posted on 2014-08-05
Medium Priority
Last Modified: 2014-08-23
Hi everyone,
We have two front-end servers that are load balanced.  Server 2008 R2.  IIS is serving a couple web apps, specifically web forms.  We've been experiencing viewstate errors during onSubmit so we configured a static Machine Key for each web app in the IIS gui and web.config's, consistently across both servers.  We're still facing viewstate problems so we took a closer look at the registry keys.

We found a discrepancy on one of the servers in production.  Our development environment is configured alike and does not contain the discrepancy.  

server1 contains a few keys that server2 doesn't.  We're not positive this is an issue but these servers should be consistent.  

Our question is, how can we learn more about these keys?  This is prod so we don't want to delete them without more research.  Highlighted below is the discrepancy between servers.

Screenshots capture HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ASP.NET

Production Server1:
Production Server2:
Development Server1:
Development Server2:

Thanks in advance for your help!
Question by:bmsande
  • 3
  • 2
LVL 84

Expert Comment

by:David Johnson, CD, MVP
ID: 40245375
Best way is to add a machineKey element into each of the web server's web.config and define the same keys and algorithm. The machineKey goes under the System.web node.
i.e. in your web.config
<machineKey validation="SHA1" validationKey="A1B2C3D4E5F6F6E5D4C3B2A1A1B2C3D4E5F6F6E5D4C3B2A1A1B2C3D4 E5F6F6E5D4C3B2A1A1B2C3D4E5F6F6E5D4C3B2A1A1B2C3D4E5F6F6E5D4C3B2A1B2C3D4E5"
decryption="Auto" decryptionKey="A1B2C3D4E5F6F6E5D4C3B2A1A1B2C3D4E5F6F6E5D4C3B2A1" /> 

Open in new window


Author Comment

ID: 40245385
That was done already.  Web.config sections match with a static machine key.  But we're trying to understand these registry keys... and trying to correct the inconsistency highlighted above.

Accepted Solution

bmsande earned 0 total points
ID: 40263851
Does anyone know how to identify where these registry keys come from?  We have several web servers that we keep consistent, but this server in particular has some registry keys that are not expected.  We'd like to remove this keys but need to learn more about them before we proceed.
LVL 84

Expert Comment

by:David Johnson, CD, MVP
ID: 40265333
they were probably generated before you added the machine keys into the web.config

Author Closing Comment

ID: 40280313

Featured Post

Granular recovery for Microsoft Exchange

With Veeam Explorer for Microsoft Exchange you can choose the Exchange Servers and restore points you’re interested in, and Veeam Explorer will present the contents of those mailbox stores for browsing, searching and exporting.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
As tax season makes its return, so does the increase in cyber crime and tax refund phishing that comes with it
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…
Suggested Courses
Course of the Month16 days, 6 hours left to enroll

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question