Setting the Machine Key

From AbleCommerce Wiki
Revision as of 18:04, 12 August 2008 by Mazhar (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

There are several ways to get around this problem:

1) Host your site on a server that never restarts or recycles! Obviously, this is impossible!

2) Disable ViewstateMac by putting this “enableViewStateMac="false"” in your web.config. This approach is not 100% secure.

3) Configure ASP.NET to not use Auto-Generated Key but rather a predefined key. This is the preferred method.

The third option is the most secure and the best one. There is a free Machine Key generator tool available at the following link http://aspnetresources.com/tools/keycreator.aspx In order to generate the key using this tool Leave the defaults in place, validation key length 64, encryption key length 24, type sha1. Then Click Generate to create a random machine key for you and copy the result.

Now open the web.config file from your site. Find around line which shows <system.web> And paste in the <machineKey ... /> on the next line. Save that file.

Retrieved from "http://wiki.ablecommerce.com/index.php?title=Setting_the_Machine_Key&oldid=326"