System.Security.Cryptography.CryptographicException: The system cannot find the file specified

All Replies

• Tuesday, June 26, 2007 5:21 AMabraham2

   
  

  0

  Hi  ranamauro,

   

   

  The problem occured due to some user priveledge issues in IIS , So i reconfigured IIS  and got it resolved .

   

  Globeranger.EdgeServices.Security.Runtime.Client is  third party component   that we are using to  access the web Methods .

   

  Cheers

  Abraham

   

  • Reply
  • Quote

   
• Thursday, July 05, 2007 8:54 AMDLafferty

   
  

  0
  You wouldn't be able to elaborate on those IIS privilege settings?  I've a feeling that I'm running into a similar problem with IIS 7.0.
  
  DL
  
  
  • Reply
  • Quote

   
• Friday, July 06, 2007 6:45 PMLauraB

   
  

  0
  Hi, i ve got exactely the same exeption when i try my web site on my server. :
  
  CryptographicException: The system cannot find the file specified.
  at System.Security.Cryptography.Utils.CreateProvHandle(CspParameters parameters, Boolean randomKeyContainer) at System.Security.Cryptography.RSACryptoServiceProvider.ImportParameters(RSAParameters parameters) at System.Security.Cryptography.RSA.FromXmlString(String xmlString) at Registration.EncryptAndSign(String strOriginalMessage, String KeySender, String KeyReciever) in c:\Inetpub\vhosts\uplay-istrip.com\httpdocs\upis\Registration.aspx.cs:line 175
  
  When i try it on my PC with Visual Web Developer, it works fine...
  
  So can u please tell me what did u change in your iss configuration?
  It would be really helpful.
  Thanx
  Laura.
  
  • Reply
  • Quote

   
• Monday, July 09, 2007 12:12 PMDLafferty

   
  

  0
  How I worked around the problem:
  
  Under IIS 5.x/6.0, simply give the user running the ASP.NET process access to the machinekey store, or change to an interactive user.  I.e. one with Document and Settings folder with their desktop.
  
  Under IIS 7.0, first, don't run using ASP.NET impersonation.  I.e. disable impersonation.  Second, follow suggestion for 5.x/6.0.
  
  • Reply
  • Quote

   
• Monday, July 09, 2007 12:19 PMLauraB

   
  

  0

  hi

  thanx for your answer.

  in fact, I ve found another solution. I don t really understand how, but it perfectly works :

  instead of writing :

  RSACryptoServiceProvider rsa = new RSACryptoServiceProvider();

  i wrote :

  CspParameters CSPParam = new CspParameters();

  CSPParam.Flags = CspProviderFlags.UseMachineKeyStore;

  RSACryptoServiceProvider rsa;

  if (System.Web.HttpContext.Current == null) // WinForm

  rsa = new RSACryptoServiceProvider();

  else // WebForm - Uses Machine store for keys

  rsa = new RSACryptoServiceProvider(CSPParam);

   

  Hope it can help.

   

  • Proposed As Answer bynobot Friday, August 15, 2008 12:20 AM
  •  
  • Reply
  • Quote

   
• Tuesday, July 01, 2008 1:28 AMCezaryK

   
  

  0
  Hello,
      In case you are working with the IIS 7, the solution for me was to change application pool's settings to load its identity profile. The command that does this is as follows:
  
  

  appcmd set apppool "AppPoolName" -processModel.loadUserProfile:true

  
      I had a problem with gaining access to certificate's private key under the account of the application pool in the context of a web service execution. The certificate was to be acquired from application pool's user personal certificate store.
  
  Greetings,
  Cezary
  
  • Proposed As Answer bychanmat Monday, November 10, 2008 5:13 AM
  •  
  • Reply
  • Quote

   
• Monday, November 10, 2008 5:30 AMchanmat

   
  

  0

  Hi,

  Thanks for LauraB's post.  However when I followed her posted answer it was not working for me when using DSACryptoServiceProvider.  I got this exception:

  Exception information:
  Exception type: CryptographicException
  Exception message: Bad Version of provider.
  
  As a test, I tried specifying the KeyContainerName but another exception occurs: 

  Exception information:
  Exception type: CryptographicException
  Exception message: The specified cryptographic service provider (CSP) does not support this key algorithm.
  
  Finally I specified the provider type code and it all works.  Complete Code is:

  // Cryptograpy parameters
  // Specify 13 for DSA procider type
  CspParameters CSPParam = new CspParameters(13, null, null);
  CSPParam.Flags = CspProviderFlags.UseMachineKeyStore;
  CSPParam.KeyContainerName = "Your Container Name";
  DSACryptoServiceProvider DSA;
  if (HttpContext.Current == null) // WinForm
  {
      DSA = new DSACryptoServiceProvider();
  }
  else // WebForm - Uses Machine store for keys
  {
      DSA = new DSACryptoServiceProvider(CSPParam);
  }

  Not sure why Microsoft don't have any info. on this, it took me some time to figure it all out.

  Hope this help.

  • Reply
  • Quote

   
• Wednesday, March 18, 2009 2:57 PMBradVoy

   
  

  0
  CezaryK said:

  Hello,
      In case you are working with the IIS 7, the solution for me was to change application pool's settings to load its identity profile. The command that does this is as follows:
  
  

  appcmd set apppool "AppPoolName" -processModel.loadUserProfile:true

  
      I had a problem with gaining access to certificate's private key under the account of the application pool in the context of a web service execution. The certificate was to be acquired from application pool's user personal certificate store.
  
  Greetings,
  Cezary
  

  
  
  I just ran into this problem, and CezaryK's suggestion solved it for me.
  • Reply
  • Quote