CryptProtectData failed when calling from ASP.NET

[poifull]

Hi Everyone,

When I call the CryptProtectData function from an ASPX page, I got the
following error:
The system cannot find the file specified

I'm getting the error only when ASP Impersonation is used by setting the
<IDENTITY> tag in web.config. Without impersonation the ASPX page works
fine.
The funny thing is if I use RUNAS to open a CMD window with the account
specified in <IDENTITY>, the ASPX page works!

The library is copied from the article "How to: Create a DPAPI Library"
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT07.asp

Any help will be appreciated.

 

[swat]

Hi poifull,

What is the authentication in IIS set to? Anonymous? Windows
Integrated? Both? Other?

 

[poifull]

Hi swat,

I found out what the problem is from this article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q322371

It clearly states that calling CryptProtectData using user store does not
work with ASP.NET because a profile is required.

Thanks for your response.