Products

Evoq Content Overview Content Creation Workflow Asset Management Mobile Responsive Personalization Content Analytics SEO Integrations Security Website PerformanceEvoq Engage Overview Community Management  Dashboard  Analytics  Member Profile Gamification Advocate Marketing Community Engagement  Ideas  Answers  Discussions  Groups  Wikis  Events Mobile ReadyDNN Support PackagesEvoq: CMS FeaturesEvoq OnDemandCompare DNN's CMS Products

Solutions

Content Management SystemMulti-Channel PublishingDigital MarketingOnline Community ManagementIntranet Software SolutionOur CustomersPrime

Resources

Test DrivesSchedule A DemoDocumentation CenterWebinarsWhite PapersProduct ManualsRequest PricingData SheetsCase StudiesEvoq Preferred Products Content Management Ecommerce Forms Identity Management and Authentication Site Management Social Themes

Partners

DNN Partners Partner Directory Become a DNN Partner Partner Program Overview  Hosting  Implementation  ISV  Training  Competencies

Community

Participate Ask a Question Forums Community Showcase DNN MVP  Program Overview  Lifetime MVPs  Honorary MVPs Subscribe to DNN Digest Advisory Groups  Awareness Advisory Group  Developer Advisory Group  Partner Advisory Group  Technology Advisory GroupLearn Documentation Wiki Community Blog Video Library Project History Development RoadmapDownload DNN Store Language Packs Manuals Nightly BuildsSecurity Policies Security Center

Blog

About

News Press Releases News Coverage Press KitCareersContact DNN

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...How to change machine key and reencrypt all user data?How to change machine key and reencrypt all user data?
Previous
 
Next
New Post
10/5/2010 4:24 AM
 
Store Integrator


Joined: 11/27/2007
Posts: 238
Hi,

Out of precaution for the security vulnerability in ASP.NET we would like to reencrypt our machine key. We are not hacked, but we want to do everything to make sure our customer data is still safe.

Can somebody of DNN outline the procedure and provide the tools to do this?

J.
 
New Post
10/5/2010 4:49 AM
 
Sebastian Leupold


Sebastian Leupold's Avatar

Sebastian Leupold's Avatar

Sebastian Leupold's Avatar

Sebastian Leupold's Avatar

www.dnnwerk.de
Joined: 3/8/2004
Posts: 46212
encryption of parts of the web.config requires core code changes, and may not be of help if someone succeeds to apply the oracle padding attack. Please make sure to apply all MS security fixes.
Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
10/5/2010 3:27 PM
 
Joe Wolner


Joined: 6/24/2008
Posts: 13
Seems like this procedure/steps would be a good thing to have when you want to change your machine key(or have different ones between development and production sites). It looked like DNN did this themselves over this last weekend. So the procedure would be well documented.
 
New Post
10/5/2010 5:27 PM
 
David Lee


David Lee's Avatar

www.nevoweb.com
Joined: 3/29/2005
Posts: 446
Hi,
I think J has a good point.  Nearly all sites will have had a time where the attack could have gained the machinekeys, therefore even after applying the patch, is the website still open for attacked??

If you change the machinekeys and re-encrypt the passwords, then your site is secure from possible attack.  I know this is a difficult task and potentially fatal to the website, but DNN corp have obviously got tools to do this.  Maybe some kind of controlled release of those tools will help ensure site security for all community memebers who wish to use them.

Dave.
 
New Post
10/7/2010 5:44 PM
 
Chris Csanyi


Joined: 6/14/2007
Posts: 106
I have tried to search for a way to do this my self.  We are planning on moving users to another DNN site that has a different machinekey but have not found any help on how to start this task.  Any scripts or postings would be great.
 
 Page 1 of 2
12Next 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...How to change machine key and reencrypt all user data?How to change machine key and reencrypt all user data?


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out