RSA密钥存储权限 [英] RSA Key Store Permissions

问题描述

从昨天开始，我一直无法使用sn.exe或通过也使用sn.exe的Visual Studio生成强名称密钥.

Since yesterday I haven't been able to generate strong name keys using sn.exe or through Visual Studio which also uses sn.exe.

在尝试生成密钥文件时，将执行以下命令

When attempting to generate a key file the following cimmand is executed

sn-k密钥文件.snk"

sn - k "key file.snk"

sn.exe然后回应

sn.exe then responds with

无法生成强名称密钥对-访问被拒绝.

Failed to generate a strong name key pair -- Access is denied.

在运行Process Monitor时重复此过程之后，我现在知道sn.exe被拒绝访问的位置全部位于以下目录中

After repeating this process while running Process Monitor I now know that the locations to which sn.exe is denied access all reside within the following directory

\ ProgramData \ Microsoft \ Crypto \ RSA \ MachineKeys

\ProgramData\Microsoft\Crypto\RSA\MachineKeys

查询此文件夹的权限表明，所有人"和管理员"组没有权限，并且网络服务"帐户具有完全控制"权限.

Querying the permissions of this folder reveals that the Everyone and Administrators groups have no rights and the NETWORK SERVICE account has Full Control.

昨天，我安装了SourceGear Fortress，它确实使用NETWORK SERVICE帐户，但这是在问题发生之前对系统的唯一重大更改.

Yesterday, I installed SourceGear Fortress which does use the NETWORK SERVICE account, however that is the only sicnificant change to the system prior to the issue occuring.

每个人和管理员对RSA密钥存储区没有权限是正常的吗?

Is it normal for Everyone and Administrators to have no rights to the RSA key store?

推荐答案

在恢复对MachineKeys目录的用户帐户的读写权限后，我再次能够生成密钥

After restoring Read and Write permissions to my user account for the MachineKeys directory I was again able to generate keys

这篇关于RSA密钥存储权限的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！