We're using DPAPIProtectedConfigurationProvider from the Windows Data Protection API to encrypt an application config file. The API offers a property called UseMachineProtection, so that the config file is bound to one specific machine.

Which attributes of the machine are used to determine this? For example, if it was just the MAC address of the machine, would that mean the config would become unreadable once the MAC address changes?

  • You seem to be asking two different things: "Why does the file become unreadable?" and "What attributes of the machine is UseMachineProtection validated against?" Is this correct? – MechMK1 May 16 '19 at 12:56
  • Hi @MechMK1 No I only want to know the attributes of the machine which usemachineprotection encrypts against. Sorry for the confusion – Lewis Singleton May 16 '19 at 14:17
  • I suggested an edit for your question to reflect this. I hope this reflects the question better. – MechMK1 May 16 '19 at 15:36
  • 1
    It's rather simple: each machine generates its own encryption key so it's by design not a portable scheme. – Steve May 16 '19 at 16:04
  • @Steve Unless, of course, you would copy the encryption key. – MechMK1 May 17 '19 at 7:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.