I used aspnet_regiis
to create an RSA key container (machine container).
I want to secure it and I know I can use the -pa
and -pr
commands to specify access. But is there a way to see which accounts/groups have access to it?
My concern is I created a container that is basically an open book that anyone can access on this machine and get the private key.
Machine Keys are stored in:
%ProgramData%\Microsoft\Crypto\RSA\MachineKeys
They have normal file permissions, you can view as you'd like. Be careful changing permissions, they're easy to screw up.